Add cap_net_bind capabilities to systemd unit and ensure correct permissions #8
@@ -7,6 +7,7 @@ EnvironmentFile={{ lego_base_path }}/%i.conf
 | 
			
		||||
User={{ lego_systemd_user }}
 | 
			
		||||
Group={{ lego_systemd_group }}
 | 
			
		||||
ExecStart={{ lego_base_path }}/run.sh
 | 
			
		||||
AmbientCapabilities=CAP_NET_BIND_SERVICE
 | 
			
		||||
 | 
			
		||||
[Install]
 | 
			
		||||
WantedBy=basic.target
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user