#!/bin/sh# CAP_NET_BIND_SERVICE: Permit binding to ports below 1024 (e.g. 80 & 443)# CAP_NET_ADMIN: Permit iptables editing, to restrict ingress on wg interfacesetcap CAP_NET_BIND_SERVICE,CAP_NET_ADMIN=+ep /usr/bin/innisfree# Reload systemd to ensure latest service file is activesystemctl daemon-reload