From a6644d8bc4eb24f8842262e0a31316b0010a402f Mon Sep 17 00:00:00 2001
From: Sunil Purushottam Thakare <sunil@thakares.com>
Date: Wed, 4 Jun 2025 15:16:36 +0530
Subject: [PATCH] Update dns_server.service

---
 dns_server.service | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/dns_server.service b/dns_server.service
index 938d699..19e46cb 100644
--- a/dns_server.service
+++ b/dns_server.service
@@ -6,8 +6,11 @@ After=network.target
 User=dnsuser
 Group=dnsuser
 WorkingDirectory=/var/nx9-dns-server
-ExecStart=/var/dns-server/nx9-dns_server  # Run directly, skip wrapper
+ExecStart=/var/dns-server/nx9-dns_server
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 Restart=always
+
 Environment=DNS_BIND=0.0.0.0:53
 Environment=DNS_ENABLE_IPV6=1
 Environment=DNS_MAX_PACKET_SIZE=4096