diff --git a/modules/adguard.nix b/modules/adguard.nix
index e4e39da..d3e52cc 100644
--- a/modules/adguard.nix
+++ b/modules/adguard.nix
@@ -137,6 +137,7 @@ in
       requires = [ "acme-${cfg.domain}.service" ];
       after = [ "acme-${cfg.domain}.service" ];
       serviceConfig.SupplementaryGroups = [ "acme" ];
+      serviceConfig.SystemCallFilter = lib.mkForce [];
       preStart = lib.mkAfter ''
         if [ -f /var/lib/private/AdGuardHome/AdGuardHome.yaml ]; then
           ${pkgs.yq-go}/bin/yq -i '.clients.persistent = load("${config.sops.templates."adguard_clients.yaml".path}").clients.persistent' /var/lib/private/AdGuardHome/AdGuardHome.yaml