From ebbd5623fff87f05d31ee43d7522c573da9b7b03 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicolas=20Mass=C3=A9?= <nicolas.masse@itix.fr>
Date: Fri, 29 May 2026 09:57:04 +0000
Subject: [PATCH] add permissions to bind port 80

---
 cookbooks/lego/lego-renew.container | 1 +
 cookbooks/lego/lego-run.container   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/cookbooks/lego/lego-renew.container b/cookbooks/lego/lego-renew.container
index 9dbafb8..f0ed199 100644
--- a/cookbooks/lego/lego-renew.container
+++ b/cookbooks/lego/lego-renew.container
@@ -13,6 +13,7 @@ ContainerName=lego-renew
 # No need for root privileges
 User=10023
 Group=10000
+AddCapability=CAP_NET_BIND_SERVICE
 
 # Image
 Image=lego.image
diff --git a/cookbooks/lego/lego-run.container b/cookbooks/lego/lego-run.container
index 91efa1c..fddf339 100644
--- a/cookbooks/lego/lego-run.container
+++ b/cookbooks/lego/lego-run.container
@@ -14,6 +14,7 @@ ContainerName=lego-run
 # No need for root privileges
 User=10023
 Group=10000
+AddCapability=CAP_NET_BIND_SERVICE
 
 # Image
 Image=lego.image