diff --git a/nixos/modules/services/networking/snowflake-proxy.nix b/nixos/modules/services/networking/snowflake-proxy.nix
index 046ca5c7b5fc..a8e86bcde0d4 100644
--- a/nixos/modules/services/networking/snowflake-proxy.nix
+++ b/nixos/modules/services/networking/snowflake-proxy.nix
@@ -38,6 +38,13 @@ in
         type = with types; nullOr str;
         default = null;
       };
+
+      extraFlags = mkOption {
+        description = "Extra flags to pass to snowflake-proxy";
+        type = with types; listOf str;
+        default = [ ];
+        example = [ "-metrics" ];
+      };
     };
   };
 
@@ -52,6 +59,7 @@ in
             ++ optional (cfg.capacity != null) "-capacity ${builtins.toString cfg.capacity}"
             ++ optional (cfg.relay != null) "-relay ${cfg.relay}"
             ++ optional (cfg.stun != null) "-stun ${cfg.stun}"
+            ++ cfg.extraFlags
           );
 
         # Security Hardening