From eb5632b87de01eeeb303b735402f93583f9a61e6 Mon Sep 17 00:00:00 2001
From: buildplan <170122315+buildplan@users.noreply.github.com>
Date: Sat, 13 Dec 2025 15:39:39 +0000
Subject: [PATCH] docs: explain why NET_ADMIN capability is required

---
 manage/clients/install-client.mdx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/manage/clients/install-client.mdx b/manage/clients/install-client.mdx
index 474f6c2..105289c 100644
--- a/manage/clients/install-client.mdx
+++ b/manage/clients/install-client.mdx
@@ -222,6 +222,7 @@ services:
 **Docker Configuration Notes:**
 
 - `network_mode: host` brings the olm network interface to the host system, allowing the WireGuard tunnel to function properly
+- `cap_add: - NET_ADMIN` is required to grant the container permission to manage network interfaces
 - `devices: - /dev/net/tun:/dev/net/tun` is required to give the container access to the TUN device for creating WireGuard interfaces
 
 ### Windows Service