Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 0c25def

Browse files
committed
Add CAP_NET_BIND_SERVICE to allow listening on :443
1 parent c9df5c6 commit 0c25def

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

coder.service

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ProtectHome=read-only
1717
PrivateTmp=yes
1818
PrivateDevices=yes
1919
SecureBits=keep-caps
20-
AmbientCapabilities=CAP_IPC_LOCK
20+
AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
2121
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
2222
NoNewPrivileges=yes
2323
ExecStart=/usr/bin/coder start

0 commit comments

Comments
 (0)