diff --git a/collabore-tunnel.service b/collabore-tunnel.service
index 2f01db1..01afddc 100644
--- a/collabore-tunnel.service
+++ b/collabore-tunnel.service
@@ -61,7 +61,7 @@ ProtectProc=invisible
 # capabilities
 RestrictNamespaces=yes
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-AmbientCapabilities=
+AmbientCapabilities=CAP_NET_BIND_SERVICE
 
 [Install]
 WantedBy=multi-user.target