diff --git a/modules/k3s/default.nix b/modules/k3s/default.nix
index d418a8d..199e841 100644
--- a/modules/k3s/default.nix
+++ b/modules/k3s/default.nix
@@ -19,7 +19,7 @@ in
   };
 
   config = mkIf cfg.enable {
-    
+
     boot.kernelModules = [ "fuse" ];
     programs.fuse.userAllowOther = true;
 
@@ -81,6 +81,9 @@ in
       path = with pkgs; [
         openiscsi
       ];
+      serviceConfig = {
+        DeviceAllow = [ "/dev/fuse rwm" ];
+      };
     };
     
     system.activationScripts.cleanK3sManifests = {