diff --git a/ansible/roles/edge-host/defaults/main.yml b/ansible/roles/edge-host/defaults/main.yml
index 9614956d..50e3c803 100644
--- a/ansible/roles/edge-host/defaults/main.yml
+++ b/ansible/roles/edge-host/defaults/main.yml
@@ -16,6 +16,7 @@ edge_docker_log_driver: journald      # container stdout -> journal, no json log
 # is the authenticated cluster ingress (Traefik basic-auth).
 edge_alloy_config_file: /etc/alloy/edge.alloy
 edge_alloy_http_port: 12345
+edge_alloy_bin: /usr/bin/grafana-alloy   # Arch `grafana-alloy` pkg names the binary this, not `alloy`
 edge_loki_push_url: "https://loki.renner.uno/loki/api/v1/push"
 edge_loki_username: edge-1
 edge_alloy_labels:
diff --git a/ansible/roles/edge-host/templates/edge-alloy.service.j2 b/ansible/roles/edge-host/templates/edge-alloy.service.j2
index 830925b2..1eb79aa3 100644
--- a/ansible/roles/edge-host/templates/edge-alloy.service.j2
+++ b/ansible/roles/edge-host/templates/edge-alloy.service.j2
@@ -13,7 +13,7 @@ SupplementaryGroups=systemd-journal
 # WAL + positions on tmpfs so the agent never writes to the eMMC. %t is the
 # runtime dir root (/run); RuntimeDirectory creates /run/alloy owned by us.
 RuntimeDirectory=alloy
-ExecStart=/usr/bin/alloy run \
+ExecStart={{ edge_alloy_bin }} run \
   --server.http.listen-addr=127.0.0.1:{{ edge_alloy_http_port }} \
   --storage.path=%t/alloy \
   {{ edge_alloy_config_file }}