diff --git a/dns_server.service b/dns_server.service
index 938d699..19e46cb 100644
--- a/dns_server.service
+++ b/dns_server.service
@@ -6,8 +6,11 @@ After=network.target
 User=dnsuser
 Group=dnsuser
 WorkingDirectory=/var/nx9-dns-server
-ExecStart=/var/dns-server/nx9-dns_server  # Run directly, skip wrapper
+ExecStart=/var/dns-server/nx9-dns_server
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 Restart=always
+
 Environment=DNS_BIND=0.0.0.0:53
 Environment=DNS_ENABLE_IPV6=1
 Environment=DNS_MAX_PACKET_SIZE=4096