diff --git a/modules/proxy.nix b/modules/proxy.nix
index 6aec33d..d958e01 100644
--- a/modules/proxy.nix
+++ b/modules/proxy.nix
@@ -63,6 +63,7 @@ let
         Restart = "on-failure";
         RestartSec = "5s";
         DynamicUser = true;
+        AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
       };
     };