diff --git a/lemmy-container.nix b/lemmy-container.nix
index 5e65572..e35cb19 100644
--- a/lemmy-container.nix
+++ b/lemmy-container.nix
@@ -78,6 +78,7 @@ in {
           hostPath = cfg.admin-password-file;
         };
       };
+      extraCapabilities = [ "CAP_SYS_ADMIN" ];
       config = {
         boot.tmp.useTmpfs = true;
         system.nssModules = mkForce [ ];