If you have a service run with systemd you can use this in the unit file: AmbientCapabilities=CAP_NET_BIND_SERVICE otherwise you'll have to run setcap any tim

If you have a service run with systemd you can use this in the unit file: AmbientCapabilities=CAP_NET_BIND_SERVICE otherwise you'll have to run setcap any time the binary changes.