diff --git a/Dockerfile.tinc b/Dockerfile.tinc
index ded0707..9dfad1f 100644
--- a/Dockerfile.tinc
+++ b/Dockerfile.tinc
@@ -6,4 +6,4 @@ RUN apk add tinc
 EXPOSE 9993/tcp 655/udp
 VOLUME /etc/tinc
 
-CMD [ "sh", "-c", "/usr/sbin/tincd --net=$NETNAME --no-detach --debug=3" ]
+CMD [ "sh", "-c", "/usr/sbin/tincd --net=$NETNAME --no-detach --user nobody --debug=3" ]
diff --git a/tinc/lixonet/tinc.conf.tmpl b/tinc/lixonet/tinc.conf.tmpl
index b49c2e1..0fd2c0e 100644
--- a/tinc/lixonet/tinc.conf.tmpl
+++ b/tinc/lixonet/tinc.conf.tmpl
@@ -9,7 +9,7 @@
 Name = ${name}
 
 # Do not change these.  Lixonet runs over port 9993 by standard.
-BindToInterface = ${wan_interface}
+BindToAddress = ${listen_address}
 Port = 9994
 
 # Device is named "lixonet" by Tinc and visible directly in host kernel