From 9797d1d84e301f9fa063d6f14337792afed943b9 Mon Sep 17 00:00:00 2001
From: Nico Felbinger <nico@felbinger.eu>
Date: Tue, 31 Dec 2024 02:15:45 +0100
Subject: [PATCH] prometheus-frr-exporter: fix communication to frr unix socket

---
 nixos/modules/services/monitoring/prometheus/exporters/frr.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/monitoring/prometheus/exporters/frr.nix b/nixos/modules/services/monitoring/prometheus/exporters/frr.nix
index f2d3f5a031a68..e5f715168b0f3 100644
--- a/nixos/modules/services/monitoring/prometheus/exporters/frr.nix
+++ b/nixos/modules/services/monitoring/prometheus/exporters/frr.nix
@@ -38,6 +38,7 @@ in
     serviceConfig = {
       DynamicUser = false;
       RuntimeDirectory = "prometheus-frr-exporter";
+      RestrictAddressFamilies = [ "AF_UNIX" ];
       ExecStart = ''
         ${lib.getExe pkgs.prometheus-frr-exporter} \
           ${concatMapStringsSep " " (x: "--collector." + x) cfg.enabledCollectors} \