nixos/prometheus-libvirt-exporter: fix systemd socket restrictions

Allow AF_UNIX, AF_INET, and AF_INET6 address families so the exporter can connect to the libvirt socket and serve HTTP metrics.
2026-04-04 00:51:27 +05:30
parent a517010c3c
commit e50595fdff
1 changed files with 5 additions and 0 deletions
@@ -24,6 +24,11 @@ in
        --web.listen-address ${cfg.listenAddress}:${toString cfg.port} \
        --libvirt.uri ${cfg.libvirtUri} ${lib.concatStringsSep " " cfg.extraFlags}
      '';
+      RestrictAddressFamilies = [
+        "AF_UNIX"
+        "AF_INET"
+        "AF_INET6"
+      ];
    };
  };
 }