diff --git a/modules/services/sentinelone/default.nix b/modules/services/sentinelone/default.nix
index f494141..74fbbaa 100644
--- a/modules/services/sentinelone/default.nix
+++ b/modules/services/sentinelone/default.nix
@@ -128,6 +128,12 @@ in
         BindPaths = [
           "${cfg.dataDir}:/opt/sentinelone"
         ];
+
+        # mj: resource constraints
+        CPUSchedulingPolicy = "idle";
+        IOSchedulingClass = "idle";
+        IOSchedulingPriority = 7;
+
         BindReadOnlyPaths = [
           "${cfg.package}/opt/sentinelone/bin:/opt/sentinelone/bin"
           "${cfg.package}/opt/sentinelone/ebpfs:/opt/sentinelone/ebpfs"