diff --git a/Dockerfile b/Dockerfile
index 41f745b8..64e8d5d9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -79,7 +79,7 @@ ENV VPNSP=pia \
     OPENVPN_FLAGS= \
     OPENVPN_CIPHER= \
     OPENVPN_AUTH= \
-    OPENVPN_ROOT=yes \
+    OPENVPN_ROOT=no \
     OPENVPN_TARGET_IP= \
     OPENVPN_IPV6=off \
     OPENVPN_CUSTOM_CONFIG= \
diff --git a/internal/configuration/openvpn.go b/internal/configuration/openvpn.go
index 286e0de8..003acfe1 100644
--- a/internal/configuration/openvpn.go
+++ b/internal/configuration/openvpn.go
@@ -127,7 +127,7 @@ func (settings *OpenVPN) read(r reader, serviceProvider string) (err error) {
 		settings.Flags = strings.Fields(flagsStr)
 	}
 
-	settings.Root, err = r.env.YesNo("OPENVPN_ROOT", params.Default("yes"))
+	settings.Root, err = r.env.YesNo("OPENVPN_ROOT", params.Default("no"))
 	if err != nil {
 		return fmt.Errorf("environment variable OPENVPN_ROOT: %w", err)
 	}