diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9c4b3dd5..c280565b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,8 +18,9 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 ### Fixed
 
-* evolinux-base : Update PermitRootLogin task to work on Debian 11
-* evolinux-user : Update PermitRootLogin task to work on Debian 11
+* evolinux-base: Update PermitRootLogin task to work on Debian 11
+* evolinux-user: Update PermitRootLogin task to work on Debian 11
+* minifirewall: docker mode is configurable
 
 ### Removed
 
diff --git a/minifirewall/tasks/config.yml b/minifirewall/tasks/config.yml
index 1ddb9695..c11b83e8 100644
--- a/minifirewall/tasks/config.yml
+++ b/minifirewall/tasks/config.yml
@@ -70,7 +70,7 @@
       # WARNING : If the port mapping is different between the host and the container
       # (ie: Listen on :8090 on host, but :8080 in container)
       # then you need to give the port used inside the container
-      DOCKER='off'
+      DOCKER='{{ minifirewall_docker }}'
 
       # Trusted IPv4 local network
       # ...will be often IP/32 if you don't trust anything