# Pi-Hole - "missing required capability NET\_ADMIN"

**URL:** <https://community.umbrel.com/t/pi-hole-missing-required-capability-net-admin/3308>\
**Category:** Support and Troubleshooting\
**Created:** [September 10, 2021, 8:14am UTC](https://community.umbrel.com/t/pi-hole-missing-required-capability-net-admin/3308 "2021-09-10T08:14:00Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![rawlingsta](https://avatars.discourse-cdn.com/v4/letter/r/8edcca/32.png) [@rawlingsta](https://community.umbrel.com/u/rawlingsta)\
**Post date:** [February 8, 2022, 5:59pm UTC](https://community.umbrel.com/t/pi-hole-missing-required-capability-net-admin/3308/11 "2022-02-08T17:59:13Z")

</div>

You have to set it up to run a different docker network and assign it an IP. The reason being that there’s no way to forward broadcasts to the internal docker network.

Here’s my docker-compose.yml .

```auto
version: "3.7"

services:
  server:
    image: pihole/pihole
    # Pi-hole doesn't currently support running as non-root
    # https://github.com/pi-hole/docker-pi-hole/issues/685
    # user: "1000:1000"
    restart: on-failure
    cap_add:
      - NET_ADMIN
    volumes:
      - ${APP_DATA_DIR}/data/pihole:/etc/pihole/
      - ${APP_DATA_DIR}/data/dnsmasq:/etc/dnsmasq.d/
    environment:
      - VIRTUAL_HOST=${APP_DOMAIN}
      - WEBPASSWORD=${APP_PASSWORD}
    networks:
      default:
        ipv4_address: 192.168.1.253 #available IP to assign statically to Pi-Hole. Note, this isn't actually assigned to an interface. Just an IP for the docker container really

networks:
  default:
    driver: macvlan
    driver_opts:
      parent: eth0
    ipam:
      config:
        - subnet: 192.168.1.0/24
          gateway: 192.168.1.1
          ip_range: 192.168.1.248/29 #network address of range
```

Basically the macvlan network will be assigned the .253 IP address and a virtual MAC to receive BOOTP broadcasts. Also note, since it has an ‘external’ IP, no need for port forwarding anymore.

---

_[View the full topic](https://community.umbrel.com/t/pi-hole-missing-required-capability-net-admin/3308)._