diff --git a/machines/pedro/pihole.nix b/machines/pedro/pihole.nix
index b16f24b..8ebdde1 100644
--- a/machines/pedro/pihole.nix
+++ b/machines/pedro/pihole.nix
@@ -21,6 +21,7 @@ serverIP :
     "/run/secrets/pihole:/run/secrets/pihole"
   ];
   extraOptions = [
+    "--cap-add=NET_ADMIN"
     "--no-hosts"  # do not populate internal /etc/hosts with container host's
   ];
 }