~

nixos/docker/pihole/docker-compose.nix

@@ -27,6 +27,7 @@
     ];
     log-driver = "journald";
     extraOptions = [
+      "--cap-add=NET_ADMIN"
       "--cap-add=SYS_NICE"
       "--network-alias=pihole"
       "--network=pihole_default"

nixos/docker/pihole/docker-compose.yml

@@ -28,7 +28,7 @@ services:
     cap_add:
       # See https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
       # Required if you are using Pi-hole as your DHCP server, else not needed
-      # - NET_ADMIN
+      - NET_ADMIN
       # Required if you are using Pi-hole as your NTP client to be able to set the host's system time
       # - SYS_TIME
       # Optional, if Pi-hole should get some more processing time