diff --git a/README.md b/README.md
index b6c7997b..8c88d9d5 100644
--- a/README.md
+++ b/README.md
@@ -56,8 +56,6 @@ $ docker run -d \
   -v ~/.wg-easy:/etc/wireguard \
   -p 51820:51820/udp \
   -p 51821:51821/tcp \
-  --cap-add=NET_ADMIN \
-  --cap-add=SYS_MODULE \
   --sysctl="net.ipv4.conf.all.src_valid_mark=1" \
   --sysctl="net.ipv4.ip_forward=1" \
   --restart unless-stopped \
diff --git a/package.json b/package.json
index ded9b4e9..2794f3c4 100644
--- a/package.json
+++ b/package.json
@@ -3,6 +3,6 @@
   "scripts": {
     "build": "DOCKER_BUILDKIT=1 docker build --tag wg-easy .",
     "serve": "docker-compose -f docker-compose.yml -f docker-compose.dev.yml up",
-    "start": "docker run --env WG_HOST=0.0.0.0 --name wg-easy --cap-add=NET_ADMIN --cap-add=SYS_MODULE --sysctl=\"net.ipv4.conf.all.src_valid_mark=1\" --mount type=bind,source=\"$(pwd)\"/config,target=/etc/wireguard -p 51820:51820/udp -p 51821:51821/tcp wg-easy"
+    "start": "docker run --env WG_HOST=0.0.0.0 --name wg-easy --sysctl=\"net.ipv4.conf.all.src_valid_mark=1\" --mount type=bind,source=\"$(pwd)\"/config,target=/etc/wireguard -p 51820:51820/udp -p 51821:51821/tcp wg-easy"
   }
 }