diff --git a/services/telegraf.nix b/services/telegraf.nix
index a375514a..dbaf747f 100644
--- a/services/telegraf.nix
+++ b/services/telegraf.nix
@@ -10,7 +10,7 @@
 
   # Add telegraf to "wheel" to allow the use of sudo:
   users.users.telegraf = {
-    extraGroups = [ "wheel" ];
+    extraGroups = [ "root" ];
     isSystemUser = true;
   };
 
@@ -71,7 +71,7 @@
         swap = {};
         system = {};
         fail2ban = {
-          use_sudo = true;
+          # use_sudo = true;
           socket = "/var/run/fail2ban/fail2ban.sock";
         };
         intel_powerstat = {};