diff --git a/hosts/home-morefine/systemd/backrest/backrest.service b/hosts/home-morefine/systemd/backrest/backrest.service
index 71d989c..60348e0 100644
--- a/hosts/home-morefine/systemd/backrest/backrest.service
+++ b/hosts/home-morefine/systemd/backrest/backrest.service
@@ -9,6 +9,8 @@ ExecStart=/usr/local/bin/backrest
 WorkingDirectory=/home/backups/backrest
 # wrap with caddy reverse proxy
 Environment="BACKREST_PORT=172.17.0.1:9898"
+AmbientCapabilities=CAP_DAC_READ_SEARCH
+CapabilityBoundingSet=CAP_DAC_READ_SEARCH
 
 [Install]
 WantedBy=multi-user.target