From a31298fbb5ba5243eb33bf7b374035369539c56d Mon Sep 17 00:00:00 2001 From: Harsh Shandilya Date: Tue, 10 Sep 2019 20:59:28 +0530 Subject: [PATCH] systemd: gitea: Unlock CAP_NET_BIND_SERVICE Signed-off-by: Harsh Shandilya --- systemd_units/gitea.service | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/systemd_units/gitea.service b/systemd_units/gitea.service index d6e82e3..37869a6 100644 --- a/systemd_units/gitea.service +++ b/systemd_units/gitea.service @@ -15,8 +15,8 @@ WorkingDirectory=/var/lib/gitea/ ExecStart=/usr/local/bin/gitea web -c /etc/gitea/app.ini Restart=always Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea -#CapabilityBoundingSet=CAP_NET_BIND_SERVICE -#AmbientCapabilities=CAP_NET_BIND_SERVICE +CapabilityBoundingSet=CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_BIND_SERVICE CPUWeight=20 CPUQuota=25% IOWeight=20