Use security/portacl-rc to enable privileged port binding: # portmaster security/portacl-rc # sysrc portacl_users+=www # sysrc portacl_user_www_tcp="http https" # sysrc portacl_user_www_udp="https" # service portacl enable # service portacl start Configure caddy to run as www:www # sysrc caddy_user=www caddy_group=www Note if