From 896c5cda02abb39b80cadac7cead2e6788c96fd9 Mon Sep 17 00:00:00 2001
From: Martyn Ranyard <m@rtyn.berlin>
Date: Tue, 11 Mar 2025 16:33:30 +0000
Subject: [PATCH] rootless 80 another way

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
---
 everything-app/paperless-ngx.yaml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/everything-app/paperless-ngx.yaml b/everything-app/paperless-ngx.yaml
index efe4b90..e972c4a 100644
--- a/everything-app/paperless-ngx.yaml
+++ b/everything-app/paperless-ngx.yaml
@@ -60,9 +60,11 @@ spec:
         value: "511772986"
       valuesObject:
         securityContext:
-          sysctls:
-          - name: "net.ipv4.ip_unprivileged_port_start"
-            value: "0"
+          capabilities:
+            drop:
+            - "ALL"
+            add:
+            - "NET_BIND_SERVICE"
         service:
           main:
             annotations: