diff --git a/dankclaw/searxng/quadlet/gluetun.container b/dankclaw/searxng/quadlet/gluetun.container
index 34bca84..577f4b3 100644
--- a/dankclaw/searxng/quadlet/gluetun.container
+++ b/dankclaw/searxng/quadlet/gluetun.container
@@ -17,7 +17,7 @@ After=searxng-network.service network.target
 ContainerName=gluetun
 Network=searxng.network
 Image=docker.io/qmcgaw/gluetun:latest
-CapAdd=NET_ADMIN
+AddCapability=NET_ADMIN
 Device=/dev/net/tun:/dev/net/tun
 Environment=VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER}
 Environment=VPN_TYPE=${VPN_TYPE}
diff --git a/tests/searxng_quadlet.bats b/tests/searxng_quadlet.bats
index 040c7f3..4797982 100644
--- a/tests/searxng_quadlet.bats
+++ b/tests/searxng_quadlet.bats
@@ -37,8 +37,8 @@ QDIR="$REPO_ROOT/dankclaw/searxng/quadlet"
 }
 
 @test "gluetun has NET_ADMIN and the /dev/net/tun device" {
-    grep -qE '^CapAdd=NET_ADMIN' "$QDIR/gluetun.container" \
-        || { echo "gluetun.container must set CapAdd=NET_ADMIN"; return 1; }
+    grep -qE '^AddCapability=NET_ADMIN' "$QDIR/gluetun.container" \
+        || { echo "gluetun.container must set AddCapability=NET_ADMIN"; return 1; }
     grep -qE '^Device=/dev/net/tun' "$QDIR/gluetun.container" \
         || { echo "gluetun.container must set Device=/dev/net/tun"; return 1; }
 }