diff --git a/docker-compose.installer.yml b/docker-compose.installer.yml
index 31c8bfea7..982bb4f80 100644
--- a/docker-compose.installer.yml
+++ b/docker-compose.installer.yml
@@ -7,5 +7,4 @@ services:
     restart: 'no'
     entrypoint: docker_installer
     command: install
-    user: root
     privileged: true
diff --git a/docker-compose.sample.yml b/docker-compose.sample.yml
index 3df6f6f74..c5e10c068 100644
--- a/docker-compose.sample.yml
+++ b/docker-compose.sample.yml
@@ -194,7 +194,6 @@ services:
       - backups:/var/azuracast/backups
       - acme:/var/azuracast/acme
       - db_data:/var/lib/mysql
-    user: root
     restart: unless-stopped
     ulimits:
       nofile:
diff --git a/src/Installer/Command/InstallCommand.php b/src/Installer/Command/InstallCommand.php
index a1a150a7b..9214838b4 100644
--- a/src/Installer/Command/InstallCommand.php
+++ b/src/Installer/Command/InstallCommand.php
@@ -367,11 +367,16 @@ final class InstallCommand extends Command
             unset($service);
         }
 
-        // Remove web updater if disabled or in Podman mode.
+        // Remove web updater if disabled.
         if (!$azuracastEnv->getAsBool(Environment::ENABLE_WEB_UPDATER, true)) {
             unset($yaml['services']['updater']);
         }
 
+        // Podman privileged mode explicit specification.
+        if ($env->getAsBool('AZURACAST_PODMAN_MODE', false)) {
+            $yaml['services']['web']['privileged'] = 'true';
+        }
+
         $yamlRaw = Yaml::dump($yaml, PHP_INT_MAX);
         file_put_contents($dockerComposePath, $yamlRaw);