From e1b5bc6b44878664790788d871761ba72ceeb7ba Mon Sep 17 00:00:00 2001
From: Daniel Clavijo Coca <dclavijo@opennebula.io>
Date: Mon, 6 May 2024 16:34:24 +0200
Subject: [PATCH] M #-: Allow fireedge to bind to <1024 ports (#3045)

---
 share/pkgs/services/systemd/opennebula-fireedge.service | 1 +
 1 file changed, 1 insertion(+)

diff --git a/share/pkgs/services/systemd/opennebula-fireedge.service b/share/pkgs/services/systemd/opennebula-fireedge.service
index a01ea080c1..30d9f7d2ff 100644
--- a/share/pkgs/services/systemd/opennebula-fireedge.service
+++ b/share/pkgs/services/systemd/opennebula-fireedge.service
@@ -10,6 +10,7 @@ AssertFileNotEmpty=/var/lib/one/.one/sunstone_auth
 Type=simple
 Group=oneadmin
 User=oneadmin
+AmbientCapabilities=CAP_NET_BIND_SERVICE
 ExecStartPre=-/usr/sbin/logrotate -f /etc/logrotate.d/opennebula-fireedge -s /var/lib/one/.logrotate.status
 ExecStartPre=-/bin/sh -c 'for file in /var/log/one/fireedge*.log; do if [ ! -f "$file.gz" ]; then gzip -9 "$file"; fi; done'
 ExecStart=/bin/sh -c 'exec node /usr/lib/one/fireedge/dist/index.js >>/var/log/one/fireedge.log 2>>/var/log/one/fireedge.error'