diff --git a/wg-easy/deployment.yaml b/wg-easy/deployment.yaml
index 876c7e2..169aecf 100644
--- a/wg-easy/deployment.yaml
+++ b/wg-easy/deployment.yaml
@@ -24,6 +24,11 @@ spec:
         - containerPort: 51820
           protocol: UDP
         - containerPort: 51821
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+            - SYS_MODULE
         volumeMounts:
         - name: config
           mountPath: /etc/wireguard