add ability to bind to privileged ports
This commit is contained in:
parent
3f5c3a2214
commit
90e518d67b
|
@ -27,6 +27,8 @@ in {
|
||||||
after = ["rclone-serve-nfs-music.service"];
|
after = ["rclone-serve-nfs-music.service"];
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
ProtectSystem = false;
|
ProtectSystem = false;
|
||||||
|
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
|
||||||
|
CapabilityBoundingSet = "CAP_NET_BIND_SERVICE";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue