diff --git a/cluster/services/monitoring/grafana-ha.nix b/cluster/services/monitoring/grafana-ha.nix
index 54eedcf..9194574 100644
--- a/cluster/services/monitoring/grafana-ha.nix
+++ b/cluster/services/monitoring/grafana-ha.nix
@@ -107,6 +107,7 @@ in
         ExecStart = "${consul.package}/bin/consul lock --shell=false services/grafana ${run}";
         # consul uses AF_NETLINK to determine interface addresses, even when just registering a service
         RestrictAddressFamilies = base.serviceConfig.RestrictAddressFamilies ++ [ "AF_NETLINK" ];
+        Restart = "on-failure";
       };
     };
   };