diff --git a/contrib/navidrome.service b/contrib/navidrome.service
index 66f652034..817ab044c 100644
--- a/contrib/navidrome.service
+++ b/contrib/navidrome.service
@@ -38,6 +38,7 @@ RestrictNamespaces=yes
 RestrictRealtime=yes
 SystemCallFilter=@system-service
 SystemCallFilter=~@privileged @resources
+SystemCallFilter=setrlimit
 SystemCallArchitectures=native
 UMask=0066