add CAP_NET_BIND_SERVICE to coder.service (#2699)

* add CAP_NET_BIND_SERVICE to systemd unit Co-authored-by: Mathias Fredriksson <mafredri@gmail.com>
coder · Jun 28, 2022 · 0052e6a · 0052e6a
1 parent a494489
commit 0052e6a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/coder.service b/coder.service
@@ -16,7 +16,7 @@ ProtectSystem=full
 PrivateTmp=yes
 PrivateDevices=yes
 SecureBits=keep-caps
-AmbientCapabilities=CAP_IPC_LOCK
+AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
 CacheDirectory=coder
 CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK CAP_NET_BIND_SERVICE
 KillSignal=SIGINT