add CAP_NET_BIND_SERVICE to coder.service (#2699)

johnstcn · mafredri · web-flow · commit 0052e6a21b66 · 2022-06-28T16:02:42.000+01:00
* add CAP_NET_BIND_SERVICE to systemd unit

Co-authored-by: Mathias Fredriksson &lt;mafredri@gmail.com&gt;
diff --git a/coder.service b/coder.service
@@ -16,7 +16,7 @@ ProtectSystem=full
 PrivateTmp=yes
 PrivateDevices=yes
 SecureBits=keep-caps
-AmbientCapabilities=CAP_IPC_LOCK
+AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
 CacheDirectory=coder
 CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK CAP_NET_BIND_SERVICE
 KillSignal=SIGINT
