Add AmbientCapabilities

AmbientCapabilities=CAP_NET_BIND_SERVICE

README.md

@@ -326,6 +326,7 @@ ExecStart=/usr/local/bin/mtg run /etc/mtg.toml
 Restart=always
 RestartSec=3
 DynamicUser=true
+AmbientCapabilities=CAP_NET_BIND_SERVICE
 
 [Install]
 WantedBy=multi-user.target