add ability to bind to privileged ports

This commit is contained in:
chaos 2024-05-26 10:21:18 +01:00
parent 3f5c3a2214
commit 90e518d67b
No known key found for this signature in database

View file

@ -27,6 +27,8 @@ in {
after = ["rclone-serve-nfs-music.service"]; after = ["rclone-serve-nfs-music.service"];
serviceConfig = { serviceConfig = {
ProtectSystem = false; ProtectSystem = false;
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
CapabilityBoundingSet = "CAP_NET_BIND_SERVICE";
}; };
}; };