update deployment

deploy/k8s/10-deployment.yaml

@@ -75,16 +75,16 @@ spec:
                   key: api-key
           ports:
             - name: dns-udp
-              containerPort: 53
+              containerPort: 1053
               protocol: UDP
             - name: dns-tcp
-              containerPort: 53
+              containerPort: 1053
               protocol: TCP
             - name: dot
-              containerPort: 853
+              containerPort: 1853
               protocol: TCP
             - name: doh
-              containerPort: 443
+              containerPort: 8443
               protocol: TCP
             - name: admin
               containerPort: 8080
@@ -94,10 +94,6 @@ spec:
             readOnlyRootFilesystem: true
             capabilities:
               drop: ["ALL"]
-              # Only because of the low ports. The pod is not privileged and
-              # has no other capability left; drop the Service and the
-              # Capability together if you move the listeners off 53/443.
-              add: ["NET_BIND_SERVICE"]
           # Liveness: the process is up. /api/healthz is unauthenticated on
           # purpose, because a probe cannot carry an API key.
           livenessProbe: