diff --git a/init.sh b/init.sh
index f820cac..5438e7d 100755
--- a/init.sh
+++ b/init.sh
@@ -27,7 +27,7 @@ function setup_iptables() {
  iptables -t nat -$1 POSTROUTING -s $ADDRESS -o $PHY_IF -j MASQUERADE;
 }
 
-/usr/bin/boringtun $WG_IF
+/usr/bin/boringtun --disable-drop-privileges $WG_IF
 
 if [ ! -f "/etc/wireguard/$WG_IF.conf" ]; then
  mkdir -p /etc/wireguard/keys