summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLibravatar ugla <a@u8.is>2022-05-16 10:55:21 +0200
committerLibravatar GitHub <noreply@github.com>2022-05-16 10:55:21 +0200
commit6838b32235541fe099b06bc5c57b135e4544a4b3 (patch)
tree35cadcdaf7c24d0daf38578aef4a2ba102d0b473
parent[feature] Unused avatar and header cleanup (#574) (diff)
downloadgotosocial-6838b32235541fe099b06bc5c57b135e4544a4b3.tar.xz
[docs] Mention `AmbientCapabilities=CAP_NET_BIND_SERVICE` in example systemd service (#576)
-rw-r--r--example/gotosocial.service2
1 files changed, 2 insertions, 0 deletions
diff --git a/example/gotosocial.service b/example/gotosocial.service
index 9d35847b9..65a18e2c6 100644
--- a/example/gotosocial.service
+++ b/example/gotosocial.service
@@ -48,6 +48,8 @@ CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
+# You might need this if you are running as non-root on a privileged port (below 1024)
+#AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install]