diff --git a/ct/adguard-v4.sh b/ct/adguard-v4.sh
index 60b4e089d4..5d67195f6e 100644
--- a/ct/adguard-v4.sh
+++ b/ct/adguard-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/alpine-v4.sh b/ct/alpine-v4.sh
index 11f8f2e7d0..546de0ad7b 100644
--- a/ct/alpine-v4.sh
+++ b/ct/alpine-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -208,6 +210,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -237,6 +246,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/archlinux-v4.sh b/ct/archlinux-v4.sh
index 6d3243cae3..4b33de51ff 100644
--- a/ct/archlinux-v4.sh
+++ b/ct/archlinux-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/blocky-v4.sh b/ct/blocky-v4.sh
index ff4f3475ad..b861c58a0d 100644
--- a/ct/blocky-v4.sh
+++ b/ct/blocky-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/casaos-v4.sh b/ct/casaos-v4.sh
index e1e701f625..2ac1745358 100644
--- a/ct/casaos-v4.sh
+++ b/ct/casaos-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/daemonsync-v4.sh b/ct/daemonsync-v4.sh
index 820267f408..27e49b1f6e 100644
--- a/ct/daemonsync-v4.sh
+++ b/ct/daemonsync-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/dashy-v4.sh b/ct/dashy-v4.sh
index fa6e0ad62b..abb1eae3fc 100644
--- a/ct/dashy-v4.sh
+++ b/ct/dashy-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/deconz-v4.sh b/ct/deconz-v4.sh
index 2605ceae5e..1b9d3f1a9a 100644
--- a/ct/deconz-v4.sh
+++ b/ct/deconz-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/docker-v4.sh b/ct/docker-v4.sh
index 1e59839618..d65fd6a017 100644
--- a/ct/docker-v4.sh
+++ b/ct/docker-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/emby-v4.sh b/ct/emby-v4.sh
index 7bd7ccedf5..354d640bdb 100644
--- a/ct/emby-v4.sh
+++ b/ct/emby-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/emqx-v4.sh b/ct/emqx-v4.sh
index 0a79efcf1b..fcc35a86d7 100644
--- a/ct/emqx-v4.sh
+++ b/ct/emqx-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/esphome-v4.sh b/ct/esphome-v4.sh
index 95c5b25e90..2429f988e6 100644
--- a/ct/esphome-v4.sh
+++ b/ct/esphome-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/grafana-v4.sh b/ct/grafana-v4.sh
index 6762da87f4..0678a118d4 100644
--- a/ct/grafana-v4.sh
+++ b/ct/grafana-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/grocy-v4.sh b/ct/grocy-v4.sh
index f1ed2e1de4..e41ada96fd 100644
--- a/ct/grocy-v4.sh
+++ b/ct/grocy-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/heimdalldashboard-v4.sh b/ct/heimdalldashboard-v4.sh
index 7912b71b61..8c831979ce 100644
--- a/ct/heimdalldashboard-v4.sh
+++ b/ct/heimdalldashboard-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homeassistant-core-v4.sh b/ct/homeassistant-core-v4.sh
index 4098d9c092..fd3bb25046 100644
--- a/ct/homeassistant-core-v4.sh
+++ b/ct/homeassistant-core-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homeassistant-v4.sh b/ct/homeassistant-v4.sh
index 77b128df7e..a7d1fb7133 100644
--- a/ct/homeassistant-v4.sh
+++ b/ct/homeassistant-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homebridge-v4.sh b/ct/homebridge-v4.sh
index 861bc4486e..0b7510f286 100644
--- a/ct/homebridge-v4.sh
+++ b/ct/homebridge-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homepage-v4.sh b/ct/homepage-v4.sh
index 9c92edc8fe..7781857f1e 100644
--- a/ct/homepage-v4.sh
+++ b/ct/homepage-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/influxdb-v4.sh b/ct/influxdb-v4.sh
index 74121380b1..25cb3a3d79 100644
--- a/ct/influxdb-v4.sh
+++ b/ct/influxdb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/iobroker-v4.sh b/ct/iobroker-v4.sh
index 43436724d6..5b5d78b7b3 100644
--- a/ct/iobroker-v4.sh
+++ b/ct/iobroker-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/jellyfin-v4.sh b/ct/jellyfin-v4.sh
index 21af5b4410..9ebf41d8b8 100644
--- a/ct/jellyfin-v4.sh
+++ b/ct/jellyfin-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/keycloak-v4.sh b/ct/keycloak-v4.sh
index 63d553f5d1..0b9babff4f 100644
--- a/ct/keycloak-v4.sh
+++ b/ct/keycloak-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/magicmirror-v4.sh b/ct/magicmirror-v4.sh
index 5a52a4deb1..78bd04a7ac 100644
--- a/ct/magicmirror-v4.sh
+++ b/ct/magicmirror-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/mariadb-v4.sh b/ct/mariadb-v4.sh
index b2db3d31af..a1201a89a9 100644
--- a/ct/mariadb-v4.sh
+++ b/ct/mariadb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/meshcentral-v4.sh b/ct/meshcentral-v4.sh
index a7b6767c08..885a8a3c1e 100644
--- a/ct/meshcentral-v4.sh
+++ b/ct/meshcentral-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/motioneye-v4.sh b/ct/motioneye-v4.sh
index 4834b42ee2..d75d9e5204 100644
--- a/ct/motioneye-v4.sh
+++ b/ct/motioneye-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/mqtt-v4.sh b/ct/mqtt-v4.sh
index c9b3cfe659..dcdc2f71d7 100644
--- a/ct/mqtt-v4.sh
+++ b/ct/mqtt-v4.sh
@@ -93,7 +93,9 @@ function default_settings() {
 		MAC=""
     echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
     VLAN=""
-		echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
+		  echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
+  echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
 CT_TYPE=$(whiptail --title "CONTAINER TYPE" --radiolist --cancel-button Exit-Script "Choose Type" 8 58 2 \
@@ -104,7 +106,7 @@ exitstatus=$?
 if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
 fi
-PW1=$(whiptail --inputbox "Set Root Password" 8 58  --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58  --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
 exitstatus=$?
 if [ $exitstatus = 0 ]; then
   if [ -z $PW1 ]; then PW1="Automatic Login" PW=" ";
@@ -216,6 +218,7 @@ if [ "$CT_TYPE" == "1" ]; then
  fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/n8n-v4.sh b/ct/n8n-v4.sh
index c1f8835332..18e7480522 100644
--- a/ct/n8n-v4.sh
+++ b/ct/n8n-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/navidrome-v4.sh b/ct/navidrome-v4.sh
index 57bfe2a049..3e6d737f76 100644
--- a/ct/navidrome-v4.sh
+++ b/ct/navidrome-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nextcloudpi-v4.sh b/ct/nextcloudpi-v4.sh
index 68e5aed5e9..d2b8d7a273 100644
--- a/ct/nextcloudpi-v4.sh
+++ b/ct/nextcloudpi-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nginx-proxy-manager-v4.sh b/ct/nginx-proxy-manager-v4.sh
index 8e31676900..bf9c0037da 100644
--- a/ct/nginx-proxy-manager-v4.sh
+++ b/ct/nginx-proxy-manager-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nocodb-v4.sh b/ct/nocodb-v4.sh
index 8c58f846df..ba516ee418 100644
--- a/ct/nocodb-v4.sh
+++ b/ct/nocodb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/node-red-v4.sh b/ct/node-red-v4.sh
index 434bd64232..c95cc54be0 100644
--- a/ct/node-red-v4.sh
+++ b/ct/node-red-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/omada-v4.sh b/ct/omada-v4.sh
index 7ef8013190..ae0a1fafb2 100644
--- a/ct/omada-v4.sh
+++ b/ct/omada-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -113,7 +115,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -220,6 +222,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -249,6 +258,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/omv-v4.sh b/ct/omv-v4.sh
index 2d58a0addb..628f4c1174 100644
--- a/ct/omv-v4.sh
+++ b/ct/omv-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/openhab-v4.sh b/ct/openhab-v4.sh
index fb07b1fd5c..d120b45da3 100644
--- a/ct/openhab-v4.sh
+++ b/ct/openhab-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/paperless-ngx-v4.sh b/ct/paperless-ngx-v4.sh
index f735b822f2..53ea980717 100644
--- a/ct/paperless-ngx-v4.sh
+++ b/ct/paperless-ngx-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/photoprism-v4.sh b/ct/photoprism-v4.sh
index 69b2fd5ec5..217d1a3164 100644
--- a/ct/photoprism-v4.sh
+++ b/ct/photoprism-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/pihole-v4.sh b/ct/pihole-v4.sh
index 65b1df79ce..83c7b06f9d 100644
--- a/ct/pihole-v4.sh
+++ b/ct/pihole-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/plex-v4.sh b/ct/plex-v4.sh
index 71891a0f80..d179895824 100644
--- a/ct/plex-v4.sh
+++ b/ct/plex-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/podman-homeassistant-v4.sh b/ct/podman-homeassistant-v4.sh
index 87bf6dea20..bad2ad8f23 100644
--- a/ct/podman-homeassistant-v4.sh
+++ b/ct/podman-homeassistant-v4.sh
@@ -97,6 +97,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -108,7 +110,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -215,6 +217,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -244,6 +253,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/postgresql-v4.sh b/ct/postgresql-v4.sh
index 9fc542d30c..ab0fa87971 100644
--- a/ct/postgresql-v4.sh
+++ b/ct/postgresql-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/prometheus-v4.sh b/ct/prometheus-v4.sh
index f17864ae6f..4d1c7e053a 100644
--- a/ct/prometheus-v4.sh
+++ b/ct/prometheus-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/scrypted-v4.sh b/ct/scrypted-v4.sh
index a9de8c1cc6..4f1b213c4a 100644
--- a/ct/scrypted-v4.sh
+++ b/ct/scrypted-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/syncthing-v4.sh b/ct/syncthing-v4.sh
index e20ee8dfdc..9084cd49f0 100644
--- a/ct/syncthing-v4.sh
+++ b/ct/syncthing-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -106,7 +108,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -213,6 +215,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -242,6 +251,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/technitiumdns-v4.sh b/ct/technitiumdns-v4.sh
index 7d36387e4d..5bcd7bfe3b 100644
--- a/ct/technitiumdns-v4.sh
+++ b/ct/technitiumdns-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/trilium-v4.sh b/ct/trilium-v4.sh
index b64d133364..fa2f31dea4 100644
--- a/ct/trilium-v4.sh
+++ b/ct/trilium-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/ubuntu-v4.sh b/ct/ubuntu-v4.sh
index 1cd16c055e..182cdd21db 100644
--- a/ct/ubuntu-v4.sh
+++ b/ct/ubuntu-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -113,7 +115,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -220,6 +222,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -249,6 +258,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/umbrel-v4.sh b/ct/umbrel-v4.sh
index f9591a5f7c..2d876e8788 100644
--- a/ct/umbrel-v4.sh
+++ b/ct/umbrel-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/unifi-v4.sh b/ct/unifi-v4.sh
index 0051f6a5ea..2d2582ada7 100644
--- a/ct/unifi-v4.sh
+++ b/ct/unifi-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/uptimekuma-v4.sh b/ct/uptimekuma-v4.sh
index f1779f125e..fd2ee780ad 100644
--- a/ct/uptimekuma-v4.sh
+++ b/ct/uptimekuma-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/vaultwarden-v4.sh b/ct/vaultwarden-v4.sh
index 1de5fc5d06..c64c257a7f 100644
--- a/ct/vaultwarden-v4.sh
+++ b/ct/vaultwarden-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/whoogle-v4.sh b/ct/whoogle-v4.sh
index 9527d48650..0d35cb1b46 100644
--- a/ct/whoogle-v4.sh
+++ b/ct/whoogle-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/wikijs-v4.sh b/ct/wikijs-v4.sh
index b4b50eff95..df631e62b6 100644
--- a/ct/wikijs-v4.sh
+++ b/ct/wikijs-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/wireguard-v4.sh b/ct/wireguard-v4.sh
index 38e8295142..7b3bc45944 100644
--- a/ct/wireguard-v4.sh
+++ b/ct/wireguard-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -106,7 +108,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -213,6 +215,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -242,6 +251,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/zigbee2mqtt-v4.sh b/ct/zigbee2mqtt-v4.sh
index d19c5a0332..335bf03e54 100644
--- a/ct/zigbee2mqtt-v4.sh
+++ b/ct/zigbee2mqtt-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/zwave-js-ui-v4.sh b/ct/zwave-js-ui-v4.sh
index 0f2af7ab21..8442a1ecb5 100644
--- a/ct/zwave-js-ui-v4.sh
+++ b/ct/zwave-js-ui-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/setup/adguard-install.sh b/setup/adguard-install.sh
index e7b481e6d7..ec248d10dc 100644
--- a/setup/adguard-install.sh
+++ b/setup/adguard-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/blocky-install.sh b/setup/blocky-install.sh
index dd78ada91d..39690a3780 100644
--- a/setup/blocky-install.sh
+++ b/setup/blocky-install.sh
@@ -362,6 +362,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/casaos-install.sh b/setup/casaos-install.sh
index 41d6491722..dbd6260491 100644
--- a/setup/casaos-install.sh
+++ b/setup/casaos-install.sh
@@ -115,6 +115,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/daemonsync-install.sh b/setup/daemonsync-install.sh
index 16e696bc12..ef0b5f9b01 100644
--- a/setup/daemonsync-install.sh
+++ b/setup/daemonsync-install.sh
@@ -108,6 +108,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/dashy-install.sh b/setup/dashy-install.sh
index cd843b0a03..7bd1c5a041 100644
--- a/setup/dashy-install.sh
+++ b/setup/dashy-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/deconz-install.sh b/setup/deconz-install.sh
index f1cc5febdf..476a61a936 100644
--- a/setup/deconz-install.sh
+++ b/setup/deconz-install.sh
@@ -132,6 +132,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/docker-install.sh b/setup/docker-install.sh
index 4cb1e052a0..6fc265d4cb 100644
--- a/setup/docker-install.sh
+++ b/setup/docker-install.sh
@@ -158,6 +158,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/emby-install.sh b/setup/emby-install.sh
index a61e4a593f..1c0b0622fe 100644
--- a/setup/emby-install.sh
+++ b/setup/emby-install.sh
@@ -121,6 +121,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/emqx-install.sh b/setup/emqx-install.sh
index 009445be8c..da49201b59 100644
--- a/setup/emqx-install.sh
+++ b/setup/emqx-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/esphome-install.sh b/setup/esphome-install.sh
index 505a5bbf70..15160dcec7 100644
--- a/setup/esphome-install.sh
+++ b/setup/esphome-install.sh
@@ -128,6 +128,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/grafana-install.sh b/setup/grafana-install.sh
index 7eb61aee7c..0570d690f1 100644
--- a/setup/grafana-install.sh
+++ b/setup/grafana-install.sh
@@ -115,6 +115,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 systemctl start grafana-server
 systemctl enable grafana-server.service &>/dev/null
 
diff --git a/setup/grocy-install.sh b/setup/grocy-install.sh
index c15713dc72..20166eb04d 100644
--- a/setup/grocy-install.sh
+++ b/setup/grocy-install.sh
@@ -144,6 +144,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/heimdalldashboard-install.sh b/setup/heimdalldashboard-install.sh
index c177c361b0..4f57ac5072 100644
--- a/setup/heimdalldashboard-install.sh
+++ b/setup/heimdalldashboard-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homeassistant-core-install.sh b/setup/homeassistant-core-install.sh
index e07419e5a0..956db03217 100644
--- a/setup/homeassistant-core-install.sh
+++ b/setup/homeassistant-core-install.sh
@@ -146,6 +146,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homeassistant-install.sh b/setup/homeassistant-install.sh
index bef7e7f18c..6e78f010aa 100644
--- a/setup/homeassistant-install.sh
+++ b/setup/homeassistant-install.sh
@@ -342,6 +342,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homebridge-install.sh b/setup/homebridge-install.sh
index bfbe73a27a..f6ab776ca0 100644
--- a/setup/homebridge-install.sh
+++ b/setup/homebridge-install.sh
@@ -118,6 +118,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homepage-install.sh b/setup/homepage-install.sh
index f6a4d605e2..80c4ef2010 100644
--- a/setup/homepage-install.sh
+++ b/setup/homepage-install.sh
@@ -136,6 +136,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/influxdb-install.sh b/setup/influxdb-install.sh
index e050e0936b..7e8aab4cf0 100644
--- a/setup/influxdb-install.sh
+++ b/setup/influxdb-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/iobroker-install.sh b/setup/iobroker-install.sh
index 428d7f32cd..271401b64c 100644
--- a/setup/iobroker-install.sh
+++ b/setup/iobroker-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/jellyfin-install.sh b/setup/jellyfin-install.sh
index 040652bd04..b9e9de7acc 100644
--- a/setup/jellyfin-install.sh
+++ b/setup/jellyfin-install.sh
@@ -146,6 +146,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/keycloak-install.sh b/setup/keycloak-install.sh
index fd90691d6e..b72f14fe66 100644
--- a/setup/keycloak-install.sh
+++ b/setup/keycloak-install.sh
@@ -127,6 +127,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/magicmirror-install.sh b/setup/magicmirror-install.sh
index cf71719de5..a1ab2eecf7 100644
--- a/setup/magicmirror-install.sh
+++ b/setup/magicmirror-install.sh
@@ -223,6 +223,12 @@ EOF
         systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
         msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/mariadb-install.sh b/setup/mariadb-install.sh
index 2c120f3aca..b4e261ced9 100644
--- a/setup/mariadb-install.sh
+++ b/setup/mariadb-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/meshcentral-install.sh b/setup/meshcentral-install.sh
index 40fe2bb676..1e5789be5b 100644
--- a/setup/meshcentral-install.sh
+++ b/setup/meshcentral-install.sh
@@ -117,6 +117,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/motioneye-install.sh b/setup/motioneye-install.sh
index 136c611fa3..f718adc4ca 100644
--- a/setup/motioneye-install.sh
+++ b/setup/motioneye-install.sh
@@ -136,6 +136,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/mqtt-install.sh b/setup/mqtt-install.sh
index 0a2facd617..180b0c455e 100644
--- a/setup/mqtt-install.sh
+++ b/setup/mqtt-install.sh
@@ -113,6 +113,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/n8n-install.sh b/setup/n8n-install.sh
index 30e8f17690..70e4b6159c 100644
--- a/setup/n8n-install.sh
+++ b/setup/n8n-install.sh
@@ -129,6 +129,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/navidrome-install.sh b/setup/navidrome-install.sh
index 75676fde34..b6cc28e572 100644
--- a/setup/navidrome-install.sh
+++ b/setup/navidrome-install.sh
@@ -155,6 +155,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/nextcloudpi-install.sh b/setup/nextcloudpi-install.sh
index 543510d6b1..c5f63f65a3 100644
--- a/setup/nextcloudpi-install.sh
+++ b/setup/nextcloudpi-install.sh
@@ -104,6 +104,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/nginx-proxy-manager-install.sh b/setup/nginx-proxy-manager-install.sh
index 2b4da54862..9fc27d3deb 100644
--- a/setup/nginx-proxy-manager-install.sh
+++ b/setup/nginx-proxy-manager-install.sh
@@ -261,6 +261,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Starting Services"
 systemctl enable npm &>/dev/null
diff --git a/setup/nocodb-install.sh b/setup/nocodb-install.sh
index 9030ac9382..be07ed72ae 100644
--- a/setup/nocodb-install.sh
+++ b/setup/nocodb-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/node-red-install.sh b/setup/node-red-install.sh
index 8373a0e628..8e7257ec00 100644
--- a/setup/node-red-install.sh
+++ b/setup/node-red-install.sh
@@ -137,6 +137,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/omada-install.sh b/setup/omada-install.sh
index 7a6c7db44a..0fd4551e23 100644
--- a/setup/omada-install.sh
+++ b/setup/omada-install.sh
@@ -111,6 +111,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/omv-install.sh b/setup/omv-install.sh
index 513290b3cb..f5bf326774 100644
--- a/setup/omv-install.sh
+++ b/setup/omv-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/openhab-install.sh b/setup/openhab-install.sh
index a799182dd7..082db069ad 100644
--- a/setup/openhab-install.sh
+++ b/setup/openhab-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/photoprism-install.sh b/setup/photoprism-install.sh
index af60ccc0cd..85349d2564 100644
--- a/setup/photoprism-install.sh
+++ b/setup/photoprism-install.sh
@@ -196,6 +196,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/pihole-install.sh b/setup/pihole-install.sh
index 742e1b5f89..a43a230eb7 100644
--- a/setup/pihole-install.sh
+++ b/setup/pihole-install.sh
@@ -126,6 +126,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/plex-install.sh b/setup/plex-install.sh
index 881d75acc2..fad4c0487f 100644
--- a/setup/plex-install.sh
+++ b/setup/plex-install.sh
@@ -125,6 +125,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/podman-homeassistant-install.sh b/setup/podman-homeassistant-install.sh
index 4599988977..c7e09cd743 100644
--- a/setup/podman-homeassistant-install.sh
+++ b/setup/podman-homeassistant-install.sh
@@ -159,6 +159,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/postgresql-install.sh b/setup/postgresql-install.sh
index dd1919910d..8587b17c1f 100644
--- a/setup/postgresql-install.sh
+++ b/setup/postgresql-install.sh
@@ -230,6 +230,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/prometheus-install.sh b/setup/prometheus-install.sh
index 8937ded982..8b3f790710 100644
--- a/setup/prometheus-install.sh
+++ b/setup/prometheus-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/scrypted-install.sh b/setup/scrypted-install.sh
index 9b2e5e3351..b9b9223f7c 100644
--- a/setup/scrypted-install.sh
+++ b/setup/scrypted-install.sh
@@ -194,6 +194,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/syncthing-install.sh b/setup/syncthing-install.sh
index d0cb500591..cb3b21136a 100644
--- a/setup/syncthing-install.sh
+++ b/setup/syncthing-install.sh
@@ -109,6 +109,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/technitiumdns-install.sh b/setup/technitiumdns-install.sh
index 12c78df661..ab51a406fd 100644
--- a/setup/technitiumdns-install.sh
+++ b/setup/technitiumdns-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/trilium-install.sh b/setup/trilium-install.sh
index bf5a1f781b..f62528e797 100644
--- a/setup/trilium-install.sh
+++ b/setup/trilium-install.sh
@@ -130,6 +130,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/ubuntu-install.sh b/setup/ubuntu-install.sh
index 85c2580515..9b7597ba09 100644
--- a/setup/ubuntu-install.sh
+++ b/setup/ubuntu-install.sh
@@ -101,6 +101,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/umbrel-install.sh b/setup/umbrel-install.sh
index fa7f6cef69..e233a6a70d 100644
--- a/setup/umbrel-install.sh
+++ b/setup/umbrel-install.sh
@@ -116,6 +116,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
 apt-get autoclean >/dev/null
diff --git a/setup/unifi-install.sh b/setup/unifi-install.sh
index 2adeda0750..0a7f87e332 100644
--- a/setup/unifi-install.sh
+++ b/setup/unifi-install.sh
@@ -114,6 +114,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/uptimekuma-install.sh b/setup/uptimekuma-install.sh
index b0fbd82420..a7305c9e09 100644
--- a/setup/uptimekuma-install.sh
+++ b/setup/uptimekuma-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/vaultwarden-install.sh b/setup/vaultwarden-install.sh
index 81599329b7..bcd58970dd 100644
--- a/setup/vaultwarden-install.sh
+++ b/setup/vaultwarden-install.sh
@@ -191,6 +191,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/whoogle-install.sh b/setup/whoogle-install.sh
index 4c324c89d9..3971ce10e5 100644
--- a/setup/whoogle-install.sh
+++ b/setup/whoogle-install.sh
@@ -122,6 +122,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/wikijs-install.sh b/setup/wikijs-install.sh
index 850bb44bbb..01d3df47de 100644
--- a/setup/wikijs-install.sh
+++ b/setup/wikijs-install.sh
@@ -151,6 +151,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/wireguard-install.sh b/setup/wireguard-install.sh
index 45206a2919..6d72641762 100644
--- a/setup/wireguard-install.sh
+++ b/setup/wireguard-install.sh
@@ -165,6 +165,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/zigbee2mqtt-install.sh b/setup/zigbee2mqtt-install.sh
index b6859a5d9b..910dffb44d 100644
--- a/setup/zigbee2mqtt-install.sh
+++ b/setup/zigbee2mqtt-install.sh
@@ -151,6 +151,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/zwave-js-ui-install.sh b/setup/zwave-js-ui-install.sh
index 52800dbc55..68ab188565 100644
--- a/setup/zwave-js-ui-install.sh
+++ b/setup/zwave-js-ui-install.sh
@@ -127,6 +127,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 rm zwave-js-ui-${RELEASE}-linux.zip