1 files changed, 5 insertions, 0 deletions
diff --git a/modules/authentik/default.nix b/modules/authentik/default.nix
index dc87336..9cc3a3f 100644
--- a/modules/authentik/default.nix
+++ b/modules/authentik/default.nix
@@ -32,6 +32,11 @@ in
     environmentFile = "/etc/secrets/authentik/ldap.env";
   };
 
+  systemd.services.authentik-ldap.serviceConfig = {
+    AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
+    CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
+  };
+
   services.authentik-proxy = {
     enable = true;
     environmentFile = "/etc/secrets/authentik/proxy.env";