Add more capabilities for systemd

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
fix
2025-08-21 02:17:40 +00:00 · 2023-04-20 15:53:19 +02:00 · 2023-04-20 12:05:57 +02:00 · 2023-04-20 12:05:57 +02:00 · 2023-04-20 11:10:27 +02:00
3 changed files with 8 additions and 12 deletions
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -32,17 +32,7 @@ builds:

 archives:
  - id: golang-cross
-    builds:
-      - darwin-amd64
-      - darwin-arm64
-      - freebsd-amd64
-      - linux-386
-      - linux-amd64
-      - linux-arm64
-      - linux-arm-5
-      - linux-arm-6
-      - linux-arm-7
-    name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
+    name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}{{ with .Arm }}v{{ . }}{{ end }}{{ with .Mips }}_{{ . }}{{ end }}{{ if not (eq .Amd64 "v1") }}{{ .Amd64 }}{{ end }}'
    format: binary

 source:
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@

 ### Changes

+## 0.22.1 (2023-04-20)
+
+### Changes
+
+- Fix issue where SystemD could not bind to port 80 [#1365](https://github.com/juanfont/headscale/pull/1365)
+
 ## 0.22.0 (2023-04-20)

 ### Changes
--- a/docs/packaging/headscale.systemd.service
+++ b/docs/packaging/headscale.systemd.service
@@ -16,7 +16,7 @@ WorkingDirectory=/var/lib/headscale
 ReadWritePaths=/var/lib/headscale /var/run

 AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
-CapabilityBoundingSet=CAP_CHOWN
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
 LockPersonality=true
 NoNewPrivileges=true
 PrivateDevices=true
Author	SHA1	Message	Date
Kristoffer Dalby	a5afe4bd06	Add more capabilities for systemd Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2023-04-20 15:53:19 +02:00
Kristoffer Dalby	a71cc81fe7	fix Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2023-04-20 12:05:57 +02:00
Kristoffer Dalby	679305c3e4	Add version to binary release Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2023-04-20 12:05:57 +02:00
Kristoffer Dalby	c0680f34f1	fix issue where binaries are not released Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>	2023-04-20 11:10:27 +02:00