diff --git a/docs/adguard-home/getting-started.md b/docs/adguard-home/getting-started.md
index 533efddcf..2fc3265a9 100644
--- a/docs/adguard-home/getting-started.md
+++ b/docs/adguard-home/getting-started.md
@@ -226,6 +226,14 @@ Using this method requires the `setcap` utility. You may need to install it usin
 
 To allow AdGuard Home running on Linux to listen on port 53 without superuser privileges and bind its DNS servers to a particular interface, run:
 
+- For DNS-only mode:
+
+```sh
+sudo setcap 'CAP_NET_BIND_SERVICE=+eip' ./AdGuardHome
+```
+
+- For DHCP and DNS mode (additional requirement of `CAP_NET_RAW`):
+
 ```sh
 sudo setcap 'CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip' ./AdGuardHome
 ```