diff --git a/nixos/server/plex.nix b/nixos/server/plex.nix
index 3243019e..3fcc9a23 100644
--- a/nixos/server/plex.nix
+++ b/nixos/server/plex.nix
@@ -23,7 +23,8 @@ with config.users.users.${username}; {
     systemd.services.plex.serviceConfig = {
       LockPersonality = true;
       NoNewPrivileges = true;
-      PrivateDevices = true;
+      PrivateDevices = false; # hardware acceleration
+      PrivateUsers = true;
       PrivateTmp = true;
       ProtectClock = true;
       ProtectControlGroups = true;