case "${ACTION}" in post) setcap CAP_NET_BIND_SERVICE=+ep usr/bin/caddy ;; esac