commit 6838b32235541fe099b06bc5c57b135e4544a4b3
parent b143877995220022787cc265801608f1548ff490
Author: ugla <a@u8.is>
Date: Mon, 16 May 2022 10:55:21 +0200
[docs] Mention `AmbientCapabilities=CAP_NET_BIND_SERVICE` in example systemd service (#576)
Diffstat:
1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/example/gotosocial.service b/example/gotosocial.service
@@ -48,6 +48,8 @@ CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
+# You might need this if you are running as non-root on a privileged port (below 1024)
+#AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install]