diff --git a/.gitignore b/.gitignore
index 9b9ad95..051d014 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,4 +13,6 @@ temp/*
 *_orig
 *_old
 *.bak
-*.old
\ No newline at end of file
+*.old
+/a/*
+/b/*
\ No newline at end of file
diff --git a/base/gitea/gitea.spec b/base/gitea/gitea.spec
index ff2f55b..c5d2048 100644
--- a/base/gitea/gitea.spec
+++ b/base/gitea/gitea.spec
@@ -3,17 +3,18 @@
 
 Name:		gitea
 Version:	1.21.5
-Release:	3
+Release:	4
 Summary:	Git with a cup of tea, painless self-hosted git service
 License:	MIT
 Group:		Development/Other
 URL:		https://gitea.io/
 Source0:	https://github.com/go-gitea/gitea/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source6:    gitea.sysusers
-Source10:	gitea.service
-Source12:	app-gitea.ini
-Patch0:		make-version.patch
-Requires:	git-core
+Source10:   gitea.service
+Source11:   gitea.service.d.conf
+Source12:   app-gitea.ini
+Patch0:     make-version.patch
+Requires:   git-core
 BuildRequires:	git
 BuildRequires:	golang >= 1.21
 BuildRequires:  make
@@ -41,8 +42,10 @@ TAGS="bindata tidb sqlite sqlite_unlock_notify pam" make VERSION=%{version} gene
 %install
 mkdir -p %{buildroot}%{_localstatedir}/lib/%{name}
 mkdir -p %{buildroot}%{_localstatedir}/log/%{name}
+mkdir -p %{buildroot}%{_sysconfdir}/systemd/system/%{name}.service.d/
 install -Dm 0755 %{name} %{buildroot}%{_bindir}/%{name}
 install -Dm 0640 %{SOURCE10} %{buildroot}%{_unitdir}/%{name}.service
+install -Dm 0640 %{SOURCE10} %{buildroot}%{_sysconfdir}/systemd/system/%{name}.service.d/port.conf
 install -Dm 0660 %{SOURCE12} %{buildroot}%{_sysconfdir}/%{name}/app.ini
 
 install -p -D -m 0644 %{SOURCE6} \
@@ -73,12 +76,16 @@ userdel gitea
 %dir %attr(0700,%name,%name) %{_localstatedir}/log/%{name}
 %dir %{_sysconfdir}/%{name}
 %config(noreplace) %attr(0660,root,%name) %{_sysconfdir}/%{name}/app.ini
+%{_sysconfdir}/systemd/system/%{name}.service.d/port.conf
 %{_datadir}/%{name}/web
 %{_unitdir}/%{name}.service
 %{_tmpfilesdir}/%{name}.conf
 %{_sysusersdir}/%{name}.conf
 
 %changelog
+* Wed Feb 21 2024 Raven <raven@sysadmins.ws> - 1.21.5-4
+- add CAP_NET_BIND_SERVICE
+
 * Tue Feb 20 2024 Raven <raven@sysadmins.ws> - 1.21.5-3
 - package static assets