nixos/tests/acme: use CAP_NET_BIND_SERVICE

2020-04-18 05:15:47 +01:00
parent d0f04c1623
commit 695fd78ac4
2 changed files with 2 additions and 4 deletions
@@ -126,8 +126,7 @@ in {
        '';
        serviceConfig = {
          # Required to bind on privileged ports.
-          User = "root";
-          Group = "root";
+          AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
        };
      };
    };