Enabling systemd service to bind to privileged port
I run WriteFreely as a systemd service. To run it in standalone mode (binding directly to port 80 & 443), I had to add a certain variable in its unit file (configuration file):
[Service]
AmbientCapabilities=CAP_NET_BIND_SERVICE