diff --git a/ct/adguard-v4.sh b/ct/adguard-v4.sh
index 60b4e089d..5d67195f6 100644
--- a/ct/adguard-v4.sh
+++ b/ct/adguard-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/alpine-v4.sh b/ct/alpine-v4.sh
index 11f8f2e7d..546de0ad7 100644
--- a/ct/alpine-v4.sh
+++ b/ct/alpine-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -208,6 +210,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -237,6 +246,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/archlinux-v4.sh b/ct/archlinux-v4.sh
index 6d3243cae..4b33de51f 100644
--- a/ct/archlinux-v4.sh
+++ b/ct/archlinux-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/blocky-v4.sh b/ct/blocky-v4.sh
index ff4f3475a..b861c58a0 100644
--- a/ct/blocky-v4.sh
+++ b/ct/blocky-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/casaos-v4.sh b/ct/casaos-v4.sh
index e1e701f62..2ac174535 100644
--- a/ct/casaos-v4.sh
+++ b/ct/casaos-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/daemonsync-v4.sh b/ct/daemonsync-v4.sh
index 820267f40..27e49b1f6 100644
--- a/ct/daemonsync-v4.sh
+++ b/ct/daemonsync-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/dashy-v4.sh b/ct/dashy-v4.sh
index fa6e0ad62..abb1eae3f 100644
--- a/ct/dashy-v4.sh
+++ b/ct/dashy-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/deconz-v4.sh b/ct/deconz-v4.sh
index 2605ceae5..1b9d3f1a9 100644
--- a/ct/deconz-v4.sh
+++ b/ct/deconz-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/docker-v4.sh b/ct/docker-v4.sh
index 1e5983961..d65fd6a01 100644
--- a/ct/docker-v4.sh
+++ b/ct/docker-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/emby-v4.sh b/ct/emby-v4.sh
index 7bd7ccedf..354d640bd 100644
--- a/ct/emby-v4.sh
+++ b/ct/emby-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/emqx-v4.sh b/ct/emqx-v4.sh
index 0a79efcf1..fcc35a86d 100644
--- a/ct/emqx-v4.sh
+++ b/ct/emqx-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/esphome-v4.sh b/ct/esphome-v4.sh
index 95c5b25e9..2429f988e 100644
--- a/ct/esphome-v4.sh
+++ b/ct/esphome-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/grafana-v4.sh b/ct/grafana-v4.sh
index 6762da87f..0678a118d 100644
--- a/ct/grafana-v4.sh
+++ b/ct/grafana-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/grocy-v4.sh b/ct/grocy-v4.sh
index f1ed2e1de..e41ada96f 100644
--- a/ct/grocy-v4.sh
+++ b/ct/grocy-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/heimdalldashboard-v4.sh b/ct/heimdalldashboard-v4.sh
index 7912b71b6..8c831979c 100644
--- a/ct/heimdalldashboard-v4.sh
+++ b/ct/heimdalldashboard-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homeassistant-core-v4.sh b/ct/homeassistant-core-v4.sh
index 4098d9c09..fd3bb2504 100644
--- a/ct/homeassistant-core-v4.sh
+++ b/ct/homeassistant-core-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homeassistant-v4.sh b/ct/homeassistant-v4.sh
index 77b128df7..a7d1fb713 100644
--- a/ct/homeassistant-v4.sh
+++ b/ct/homeassistant-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homebridge-v4.sh b/ct/homebridge-v4.sh
index 861bc4486..0b7510f28 100644
--- a/ct/homebridge-v4.sh
+++ b/ct/homebridge-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homepage-v4.sh b/ct/homepage-v4.sh
index 9c92edc8f..7781857f1 100644
--- a/ct/homepage-v4.sh
+++ b/ct/homepage-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/influxdb-v4.sh b/ct/influxdb-v4.sh
index 74121380b..25cb3a3d7 100644
--- a/ct/influxdb-v4.sh
+++ b/ct/influxdb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/iobroker-v4.sh b/ct/iobroker-v4.sh
index 43436724d..5b5d78b7b 100644
--- a/ct/iobroker-v4.sh
+++ b/ct/iobroker-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/jellyfin-v4.sh b/ct/jellyfin-v4.sh
index 21af5b441..9ebf41d8b 100644
--- a/ct/jellyfin-v4.sh
+++ b/ct/jellyfin-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/keycloak-v4.sh b/ct/keycloak-v4.sh
index 63d553f5d..0b9babff4 100644
--- a/ct/keycloak-v4.sh
+++ b/ct/keycloak-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/magicmirror-v4.sh b/ct/magicmirror-v4.sh
index 5a52a4deb..78bd04a7a 100644
--- a/ct/magicmirror-v4.sh
+++ b/ct/magicmirror-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/mariadb-v4.sh b/ct/mariadb-v4.sh
index b2db3d31a..a1201a89a 100644
--- a/ct/mariadb-v4.sh
+++ b/ct/mariadb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/meshcentral-v4.sh b/ct/meshcentral-v4.sh
index a7b6767c0..885a8a3c1 100644
--- a/ct/meshcentral-v4.sh
+++ b/ct/meshcentral-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/motioneye-v4.sh b/ct/motioneye-v4.sh
index 4834b42ee..d75d9e520 100644
--- a/ct/motioneye-v4.sh
+++ b/ct/motioneye-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/mqtt-v4.sh b/ct/mqtt-v4.sh
index c9b3cfe65..dcdc2f71d 100644
--- a/ct/mqtt-v4.sh
+++ b/ct/mqtt-v4.sh
@@ -93,7 +93,9 @@ function default_settings() {
 		MAC=""
     echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
     VLAN=""
-		echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
+		  echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
+  echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
 CT_TYPE=$(whiptail --title "CONTAINER TYPE" --radiolist --cancel-button Exit-Script "Choose Type" 8 58 2 \
@@ -104,7 +106,7 @@ exitstatus=$?
 if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
 fi
-PW1=$(whiptail --inputbox "Set Root Password" 8 58  --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58  --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
 exitstatus=$?
 if [ $exitstatus = 0 ]; then
   if [ -z $PW1 ]; then PW1="Automatic Login" PW=" ";
@@ -216,6 +218,7 @@ if [ "$CT_TYPE" == "1" ]; then
  fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/n8n-v4.sh b/ct/n8n-v4.sh
index c1f883533..18e748052 100644
--- a/ct/n8n-v4.sh
+++ b/ct/n8n-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/navidrome-v4.sh b/ct/navidrome-v4.sh
index 57bfe2a04..3e6d737f7 100644
--- a/ct/navidrome-v4.sh
+++ b/ct/navidrome-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nextcloudpi-v4.sh b/ct/nextcloudpi-v4.sh
index 68e5aed5e..d2b8d7a27 100644
--- a/ct/nextcloudpi-v4.sh
+++ b/ct/nextcloudpi-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nginx-proxy-manager-v4.sh b/ct/nginx-proxy-manager-v4.sh
index 8e3167690..bf9c0037d 100644
--- a/ct/nginx-proxy-manager-v4.sh
+++ b/ct/nginx-proxy-manager-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nocodb-v4.sh b/ct/nocodb-v4.sh
index 8c58f846d..ba516ee41 100644
--- a/ct/nocodb-v4.sh
+++ b/ct/nocodb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/node-red-v4.sh b/ct/node-red-v4.sh
index 434bd6423..c95cc54be 100644
--- a/ct/node-red-v4.sh
+++ b/ct/node-red-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/omada-v4.sh b/ct/omada-v4.sh
index 7ef801319..ae0a1fafb 100644
--- a/ct/omada-v4.sh
+++ b/ct/omada-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -113,7 +115,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -220,6 +222,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -249,6 +258,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/omv-v4.sh b/ct/omv-v4.sh
index 2d58a0add..628f4c117 100644
--- a/ct/omv-v4.sh
+++ b/ct/omv-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/openhab-v4.sh b/ct/openhab-v4.sh
index fb07b1fd5..d120b45da 100644
--- a/ct/openhab-v4.sh
+++ b/ct/openhab-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/paperless-ngx-v4.sh b/ct/paperless-ngx-v4.sh
index f735b822f..53ea98071 100644
--- a/ct/paperless-ngx-v4.sh
+++ b/ct/paperless-ngx-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/photoprism-v4.sh b/ct/photoprism-v4.sh
index 69b2fd5ec..217d1a316 100644
--- a/ct/photoprism-v4.sh
+++ b/ct/photoprism-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/pihole-v4.sh b/ct/pihole-v4.sh
index 65b1df79c..83c7b06f9 100644
--- a/ct/pihole-v4.sh
+++ b/ct/pihole-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/plex-v4.sh b/ct/plex-v4.sh
index 71891a0f8..d17989582 100644
--- a/ct/plex-v4.sh
+++ b/ct/plex-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/podman-homeassistant-v4.sh b/ct/podman-homeassistant-v4.sh
index 87bf6dea2..bad2ad8f2 100644
--- a/ct/podman-homeassistant-v4.sh
+++ b/ct/podman-homeassistant-v4.sh
@@ -97,6 +97,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -108,7 +110,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -215,6 +217,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -244,6 +253,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/postgresql-v4.sh b/ct/postgresql-v4.sh
index 9fc542d30..ab0fa8797 100644
--- a/ct/postgresql-v4.sh
+++ b/ct/postgresql-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/prometheus-v4.sh b/ct/prometheus-v4.sh
index f17864ae6..4d1c7e053 100644
--- a/ct/prometheus-v4.sh
+++ b/ct/prometheus-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/scrypted-v4.sh b/ct/scrypted-v4.sh
index a9de8c1cc..4f1b213c4 100644
--- a/ct/scrypted-v4.sh
+++ b/ct/scrypted-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/syncthing-v4.sh b/ct/syncthing-v4.sh
index e20ee8dfd..9084cd49f 100644
--- a/ct/syncthing-v4.sh
+++ b/ct/syncthing-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -106,7 +108,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -213,6 +215,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -242,6 +251,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/technitiumdns-v4.sh b/ct/technitiumdns-v4.sh
index 7d36387e4..5bcd7bfe3 100644
--- a/ct/technitiumdns-v4.sh
+++ b/ct/technitiumdns-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/trilium-v4.sh b/ct/trilium-v4.sh
index b64d13336..fa2f31dea 100644
--- a/ct/trilium-v4.sh
+++ b/ct/trilium-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/ubuntu-v4.sh b/ct/ubuntu-v4.sh
index 1cd16c055..182cdd21d 100644
--- a/ct/ubuntu-v4.sh
+++ b/ct/ubuntu-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -113,7 +115,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -220,6 +222,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -249,6 +258,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/umbrel-v4.sh b/ct/umbrel-v4.sh
index f9591a5f7..2d876e878 100644
--- a/ct/umbrel-v4.sh
+++ b/ct/umbrel-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/unifi-v4.sh b/ct/unifi-v4.sh
index 0051f6a5e..2d2582ada 100644
--- a/ct/unifi-v4.sh
+++ b/ct/unifi-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/uptimekuma-v4.sh b/ct/uptimekuma-v4.sh
index f1779f125..fd2ee780a 100644
--- a/ct/uptimekuma-v4.sh
+++ b/ct/uptimekuma-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/vaultwarden-v4.sh b/ct/vaultwarden-v4.sh
index 1de5fc5d0..c64c257a7 100644
--- a/ct/vaultwarden-v4.sh
+++ b/ct/vaultwarden-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/whoogle-v4.sh b/ct/whoogle-v4.sh
index 9527d4865..0d35cb1b4 100644
--- a/ct/whoogle-v4.sh
+++ b/ct/whoogle-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/wikijs-v4.sh b/ct/wikijs-v4.sh
index b4b50eff9..df631e62b 100644
--- a/ct/wikijs-v4.sh
+++ b/ct/wikijs-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/wireguard-v4.sh b/ct/wireguard-v4.sh
index 38e829514..7b3bc4594 100644
--- a/ct/wireguard-v4.sh
+++ b/ct/wireguard-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -106,7 +108,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -213,6 +215,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -242,6 +251,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/zigbee2mqtt-v4.sh b/ct/zigbee2mqtt-v4.sh
index d19c5a033..335bf03e5 100644
--- a/ct/zigbee2mqtt-v4.sh
+++ b/ct/zigbee2mqtt-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/zwave-js-ui-v4.sh b/ct/zwave-js-ui-v4.sh
index 0f2af7ab2..8442a1ecb 100644
--- a/ct/zwave-js-ui-v4.sh
+++ b/ct/zwave-js-ui-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/setup/adguard-install.sh b/setup/adguard-install.sh
index e7b481e6d..ec248d10d 100644
--- a/setup/adguard-install.sh
+++ b/setup/adguard-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/blocky-install.sh b/setup/blocky-install.sh
index dd78ada91..39690a378 100644
--- a/setup/blocky-install.sh
+++ b/setup/blocky-install.sh
@@ -362,6 +362,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/casaos-install.sh b/setup/casaos-install.sh
index 41d649172..dbd626049 100644
--- a/setup/casaos-install.sh
+++ b/setup/casaos-install.sh
@@ -115,6 +115,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/daemonsync-install.sh b/setup/daemonsync-install.sh
index 16e696bc1..ef0b5f9b0 100644
--- a/setup/daemonsync-install.sh
+++ b/setup/daemonsync-install.sh
@@ -108,6 +108,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/dashy-install.sh b/setup/dashy-install.sh
index cd843b0a0..7bd1c5a04 100644
--- a/setup/dashy-install.sh
+++ b/setup/dashy-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/deconz-install.sh b/setup/deconz-install.sh
index f1cc5febd..476a61a93 100644
--- a/setup/deconz-install.sh
+++ b/setup/deconz-install.sh
@@ -132,6 +132,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/docker-install.sh b/setup/docker-install.sh
index 4cb1e052a..6fc265d4c 100644
--- a/setup/docker-install.sh
+++ b/setup/docker-install.sh
@@ -158,6 +158,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/emby-install.sh b/setup/emby-install.sh
index a61e4a593..1c0b0622f 100644
--- a/setup/emby-install.sh
+++ b/setup/emby-install.sh
@@ -121,6 +121,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/emqx-install.sh b/setup/emqx-install.sh
index 009445be8..da49201b5 100644
--- a/setup/emqx-install.sh
+++ b/setup/emqx-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/esphome-install.sh b/setup/esphome-install.sh
index 505a5bbf7..15160dcec 100644
--- a/setup/esphome-install.sh
+++ b/setup/esphome-install.sh
@@ -128,6 +128,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/grafana-install.sh b/setup/grafana-install.sh
index 7eb61aee7..0570d690f 100644
--- a/setup/grafana-install.sh
+++ b/setup/grafana-install.sh
@@ -115,6 +115,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 systemctl start grafana-server
 systemctl enable grafana-server.service &>/dev/null
 
diff --git a/setup/grocy-install.sh b/setup/grocy-install.sh
index c15713dc7..20166eb04 100644
--- a/setup/grocy-install.sh
+++ b/setup/grocy-install.sh
@@ -144,6 +144,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/heimdalldashboard-install.sh b/setup/heimdalldashboard-install.sh
index c177c361b..4f57ac507 100644
--- a/setup/heimdalldashboard-install.sh
+++ b/setup/heimdalldashboard-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homeassistant-core-install.sh b/setup/homeassistant-core-install.sh
index e07419e5a..956db0321 100644
--- a/setup/homeassistant-core-install.sh
+++ b/setup/homeassistant-core-install.sh
@@ -146,6 +146,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homeassistant-install.sh b/setup/homeassistant-install.sh
index bef7e7f18..6e78f010a 100644
--- a/setup/homeassistant-install.sh
+++ b/setup/homeassistant-install.sh
@@ -342,6 +342,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homebridge-install.sh b/setup/homebridge-install.sh
index bfbe73a27..f6ab776ca 100644
--- a/setup/homebridge-install.sh
+++ b/setup/homebridge-install.sh
@@ -118,6 +118,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homepage-install.sh b/setup/homepage-install.sh
index f6a4d605e..80c4ef201 100644
--- a/setup/homepage-install.sh
+++ b/setup/homepage-install.sh
@@ -136,6 +136,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/influxdb-install.sh b/setup/influxdb-install.sh
index e050e0936..7e8aab4cf 100644
--- a/setup/influxdb-install.sh
+++ b/setup/influxdb-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/iobroker-install.sh b/setup/iobroker-install.sh
index 428d7f32c..271401b64 100644
--- a/setup/iobroker-install.sh
+++ b/setup/iobroker-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/jellyfin-install.sh b/setup/jellyfin-install.sh
index 040652bd0..b9e9de7ac 100644
--- a/setup/jellyfin-install.sh
+++ b/setup/jellyfin-install.sh
@@ -146,6 +146,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/keycloak-install.sh b/setup/keycloak-install.sh
index fd90691d6..b72f14fe6 100644
--- a/setup/keycloak-install.sh
+++ b/setup/keycloak-install.sh
@@ -127,6 +127,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/magicmirror-install.sh b/setup/magicmirror-install.sh
index cf71719de..a1ab2eecf 100644
--- a/setup/magicmirror-install.sh
+++ b/setup/magicmirror-install.sh
@@ -223,6 +223,12 @@ EOF
         systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
         msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/mariadb-install.sh b/setup/mariadb-install.sh
index 2c120f3ac..b4e261ced 100644
--- a/setup/mariadb-install.sh
+++ b/setup/mariadb-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/meshcentral-install.sh b/setup/meshcentral-install.sh
index 40fe2bb67..1e5789be5 100644
--- a/setup/meshcentral-install.sh
+++ b/setup/meshcentral-install.sh
@@ -117,6 +117,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/motioneye-install.sh b/setup/motioneye-install.sh
index 136c611fa..f718adc4c 100644
--- a/setup/motioneye-install.sh
+++ b/setup/motioneye-install.sh
@@ -136,6 +136,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/mqtt-install.sh b/setup/mqtt-install.sh
index 0a2facd61..180b0c455 100644
--- a/setup/mqtt-install.sh
+++ b/setup/mqtt-install.sh
@@ -113,6 +113,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/n8n-install.sh b/setup/n8n-install.sh
index 30e8f1769..70e4b6159 100644
--- a/setup/n8n-install.sh
+++ b/setup/n8n-install.sh
@@ -129,6 +129,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/navidrome-install.sh b/setup/navidrome-install.sh
index 75676fde3..b6cc28e57 100644
--- a/setup/navidrome-install.sh
+++ b/setup/navidrome-install.sh
@@ -155,6 +155,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/nextcloudpi-install.sh b/setup/nextcloudpi-install.sh
index 543510d6b..c5f63f65a 100644
--- a/setup/nextcloudpi-install.sh
+++ b/setup/nextcloudpi-install.sh
@@ -104,6 +104,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/nginx-proxy-manager-install.sh b/setup/nginx-proxy-manager-install.sh
index 2b4da5486..9fc27d3de 100644
--- a/setup/nginx-proxy-manager-install.sh
+++ b/setup/nginx-proxy-manager-install.sh
@@ -261,6 +261,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Starting Services"
 systemctl enable npm &>/dev/null
diff --git a/setup/nocodb-install.sh b/setup/nocodb-install.sh
index 9030ac938..be07ed72a 100644
--- a/setup/nocodb-install.sh
+++ b/setup/nocodb-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/node-red-install.sh b/setup/node-red-install.sh
index 8373a0e62..8e7257ec0 100644
--- a/setup/node-red-install.sh
+++ b/setup/node-red-install.sh
@@ -137,6 +137,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/omada-install.sh b/setup/omada-install.sh
index 7a6c7db44..0fd4551e2 100644
--- a/setup/omada-install.sh
+++ b/setup/omada-install.sh
@@ -111,6 +111,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/omv-install.sh b/setup/omv-install.sh
index 513290b3c..f5bf32677 100644
--- a/setup/omv-install.sh
+++ b/setup/omv-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/openhab-install.sh b/setup/openhab-install.sh
index a799182dd..082db069a 100644
--- a/setup/openhab-install.sh
+++ b/setup/openhab-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/photoprism-install.sh b/setup/photoprism-install.sh
index af60ccc0c..85349d256 100644
--- a/setup/photoprism-install.sh
+++ b/setup/photoprism-install.sh
@@ -196,6 +196,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/pihole-install.sh b/setup/pihole-install.sh
index 742e1b5f8..a43a230eb 100644
--- a/setup/pihole-install.sh
+++ b/setup/pihole-install.sh
@@ -126,6 +126,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/plex-install.sh b/setup/plex-install.sh
index 881d75acc..fad4c0487 100644
--- a/setup/plex-install.sh
+++ b/setup/plex-install.sh
@@ -125,6 +125,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/podman-homeassistant-install.sh b/setup/podman-homeassistant-install.sh
index 459998897..c7e09cd74 100644
--- a/setup/podman-homeassistant-install.sh
+++ b/setup/podman-homeassistant-install.sh
@@ -159,6 +159,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/postgresql-install.sh b/setup/postgresql-install.sh
index dd1919910..8587b17c1 100644
--- a/setup/postgresql-install.sh
+++ b/setup/postgresql-install.sh
@@ -230,6 +230,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/prometheus-install.sh b/setup/prometheus-install.sh
index 8937ded98..8b3f79071 100644
--- a/setup/prometheus-install.sh
+++ b/setup/prometheus-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/scrypted-install.sh b/setup/scrypted-install.sh
index 9b2e5e335..b9b9223f7 100644
--- a/setup/scrypted-install.sh
+++ b/setup/scrypted-install.sh
@@ -194,6 +194,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/syncthing-install.sh b/setup/syncthing-install.sh
index d0cb50059..cb3b21136 100644
--- a/setup/syncthing-install.sh
+++ b/setup/syncthing-install.sh
@@ -109,6 +109,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/technitiumdns-install.sh b/setup/technitiumdns-install.sh
index 12c78df66..ab51a406f 100644
--- a/setup/technitiumdns-install.sh
+++ b/setup/technitiumdns-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/trilium-install.sh b/setup/trilium-install.sh
index bf5a1f781..f62528e79 100644
--- a/setup/trilium-install.sh
+++ b/setup/trilium-install.sh
@@ -130,6 +130,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/ubuntu-install.sh b/setup/ubuntu-install.sh
index 85c258051..9b7597ba0 100644
--- a/setup/ubuntu-install.sh
+++ b/setup/ubuntu-install.sh
@@ -101,6 +101,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/umbrel-install.sh b/setup/umbrel-install.sh
index fa7f6cef6..e233a6a70 100644
--- a/setup/umbrel-install.sh
+++ b/setup/umbrel-install.sh
@@ -116,6 +116,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
 apt-get autoclean >/dev/null
diff --git a/setup/unifi-install.sh b/setup/unifi-install.sh
index 2adeda075..0a7f87e33 100644
--- a/setup/unifi-install.sh
+++ b/setup/unifi-install.sh
@@ -114,6 +114,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/uptimekuma-install.sh b/setup/uptimekuma-install.sh
index b0fbd8242..a7305c9e0 100644
--- a/setup/uptimekuma-install.sh
+++ b/setup/uptimekuma-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/vaultwarden-install.sh b/setup/vaultwarden-install.sh
index 81599329b..bcd58970d 100644
--- a/setup/vaultwarden-install.sh
+++ b/setup/vaultwarden-install.sh
@@ -191,6 +191,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/whoogle-install.sh b/setup/whoogle-install.sh
index 4c324c89d..3971ce10e 100644
--- a/setup/whoogle-install.sh
+++ b/setup/whoogle-install.sh
@@ -122,6 +122,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/wikijs-install.sh b/setup/wikijs-install.sh
index 850bb44bb..01d3df47d 100644
--- a/setup/wikijs-install.sh
+++ b/setup/wikijs-install.sh
@@ -151,6 +151,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/wireguard-install.sh b/setup/wireguard-install.sh
index 45206a291..6d7264176 100644
--- a/setup/wireguard-install.sh
+++ b/setup/wireguard-install.sh
@@ -165,6 +165,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/zigbee2mqtt-install.sh b/setup/zigbee2mqtt-install.sh
index b6859a5d9..910dffb44 100644
--- a/setup/zigbee2mqtt-install.sh
+++ b/setup/zigbee2mqtt-install.sh
@@ -151,6 +151,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/zwave-js-ui-install.sh b/setup/zwave-js-ui-install.sh
index 52800dbc5..68ab18856 100644
--- a/setup/zwave-js-ui-install.sh
+++ b/setup/zwave-js-ui-install.sh
@@ -127,6 +127,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 rm zwave-js-ui-${RELEASE}-linux.zip