From 6838b32235541fe099b06bc5c57b135e4544a4b3 Mon Sep 17 00:00:00 2001
From: ugla <a@u8.is>
Date: Mon, 16 May 2022 10:55:21 +0200
Subject: [PATCH] [docs] Mention `AmbientCapabilities=CAP_NET_BIND_SERVICE` in
 example systemd service (#576)

---
 example/gotosocial.service | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/example/gotosocial.service b/example/gotosocial.service
index 9d35847b..65a18e2c 100644
--- a/example/gotosocial.service
+++ b/example/gotosocial.service
@@ -48,6 +48,8 @@ CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
 CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
 CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
 CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG 
+# You might need this if you are running as non-root on a privileged port (below 1024)
+#AmbientCapabilities=CAP_NET_BIND_SERVICE
 
 
 [Install]