From 8deeb56cbfe8fdb2fe3bef26ed00261cd42c2e10 Mon Sep 17 00:00:00 2001 From: buildplan <170122315+buildplan@users.noreply.github.com> Date: Sat, 13 Dec 2025 15:33:35 +0000 Subject: [PATCH 1/2] fix: extra space before cap_add removed. --- manage/clients/install-client.mdx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/manage/clients/install-client.mdx b/manage/clients/install-client.mdx index 94575d5..474f6c2 100644 --- a/manage/clients/install-client.mdx +++ b/manage/clients/install-client.mdx @@ -190,8 +190,8 @@ services: container_name: olm restart: unless-stopped network_mode: host - cap_add: - - NET_ADMIN + cap_add: + - NET_ADMIN devices: - /dev/net/tun:/dev/net/tun environment: @@ -209,8 +209,8 @@ services: container_name: olm restart: unless-stopped network_mode: host - cap_add: - - NET_ADMIN + cap_add: + - NET_ADMIN devices: - /dev/net/tun:/dev/net/tun command: From eb5632b87de01eeeb303b735402f93583f9a61e6 Mon Sep 17 00:00:00 2001 From: buildplan <170122315+buildplan@users.noreply.github.com> Date: Sat, 13 Dec 2025 15:39:39 +0000 Subject: [PATCH 2/2] docs: explain why NET_ADMIN capability is required --- manage/clients/install-client.mdx | 1 + 1 file changed, 1 insertion(+) diff --git a/manage/clients/install-client.mdx b/manage/clients/install-client.mdx index 474f6c2..105289c 100644 --- a/manage/clients/install-client.mdx +++ b/manage/clients/install-client.mdx @@ -222,6 +222,7 @@ services: **Docker Configuration Notes:** - `network_mode: host` brings the olm network interface to the host system, allowing the WireGuard tunnel to function properly +- `cap_add: - NET_ADMIN` is required to grant the container permission to manage network interfaces - `devices: - /dev/net/tun:/dev/net/tun` is required to give the container access to the TUN device for creating WireGuard interfaces ### Windows Service