diff --git a/compose.yml b/compose.yml
index a5b4b2c..310bcf4 100644
--- a/compose.yml
+++ b/compose.yml
@@ -66,7 +66,15 @@ services:
       - password=${COLLABORA_PASSWORD}
       - extra_params=--o:ssl.enable=false --o:ssl.termination=true --o:net.wopi.host=nextcloud.urmel.de
     cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - FOWNER
       - MKNOD
+      - SETFCAP
+      - SETGID
+      - SETUID
+      - SYS_CHROOT
+      - SYS_ADMIN
     entrypoint: ['/bin/bash', '-c']
     command: ['coolconfig generate-proof-key && /start-collabora-online.sh']
     healthcheck: