diff --git a/defaults/main.yml b/defaults/main.yml
index 1d7f980..5ccdb46 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -54,6 +54,8 @@ droneci_networks_applied:
 # @var droneci_memory_reservation: $ "_unset_"
 # @var droneci_memory_reservation:example: $ "256m"
 
+droneci_privileged: False
+
 droneci_db_type: sqlite
 droneci_db_server: localhost
 droneci_db_port: 5432
diff --git a/templates/services/droneci_compose.yml.j2 b/templates/services/droneci_compose.yml.j2
index 6960d88..4c07f7d 100644
--- a/templates/services/droneci_compose.yml.j2
+++ b/templates/services/droneci_compose.yml.j2
@@ -31,7 +31,7 @@ services:
       - {{ host | quote }}
       {% endfor %}
     {% endif %}
-    privileged: true
+    privileged: {{ droneci_privileged | bool | lower }}
     environment:
       - DRONE_SERVER_HOST={{ droneci_host | urlsplit('hostname') }}
       - DRONE_SERVER_PROTO={{ droneci_host | urlsplit('scheme') }}