diff --git a/docs/adguard-home/getting-started.md b/docs/adguard-home/getting-started.md
index 6c432f574..d0ac3e082 100644
--- a/docs/adguard-home/getting-started.md
+++ b/docs/adguard-home/getting-started.md
@@ -230,6 +230,14 @@ Using this method requires the `setcap` utility. You may need to install it usin
 
 To allow AdGuard Home running on Linux to listen on port 53 without superuser privileges and bind its DNS servers to a particular interface, run:
 
+- For DNS-only mode:
+
+```sh
+sudo setcap 'CAP_NET_BIND_SERVICE=+eip' ./AdGuardHome
+```
+
+- For DHCP and DNS mode (additional requirement of `CAP_NET_RAW`):
+
 ```sh
 sudo setcap 'CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip' ./AdGuardHome
 ```