Fix node-exporter wrong filesystem reading

Signed-off-by: Joonas Rautiola <[email protected]>

services/monitoring/default.nix

@@ -49,6 +49,9 @@ in
       };
     };
 
+    # with ProtectHome=true, the exporter will report incorrect filesystem bytes for /home
+    systemd.services.prometheus-node-exporter.serviceConfig.ProtectHome = lib.mkForce "read-only";
+
     # sshified user for monitoring server to log in as
     users.users.sshified = lib.mkIf cfg.metrics.ssh {
       isNormalUser = true;