From b54ba602ea9782c9a8e9fafe1fc02f4a9836e728 Mon Sep 17 00:00:00 2001
From: tteckster <tteckster@gmail.com>
Date: Wed, 23 Nov 2022 12:34:11 -0500
Subject: [PATCH] enable root ssh access during lxc creation (#765)

---
 ct/adguard-v4.sh                      | 12 +++++++++++-
 ct/alpine-v4.sh                       | 12 +++++++++++-
 ct/archlinux-v4.sh                    | 12 +++++++++++-
 ct/blocky-v4.sh                       | 12 +++++++++++-
 ct/casaos-v4.sh                       | 12 +++++++++++-
 ct/daemonsync-v4.sh                   | 12 +++++++++++-
 ct/dashy-v4.sh                        | 12 +++++++++++-
 ct/deconz-v4.sh                       | 12 +++++++++++-
 ct/docker-v4.sh                       | 12 +++++++++++-
 ct/emby-v4.sh                         | 12 +++++++++++-
 ct/emqx-v4.sh                         | 12 +++++++++++-
 ct/esphome-v4.sh                      | 12 +++++++++++-
 ct/grafana-v4.sh                      | 12 +++++++++++-
 ct/grocy-v4.sh                        | 12 +++++++++++-
 ct/heimdalldashboard-v4.sh            | 12 +++++++++++-
 ct/homeassistant-core-v4.sh           | 12 +++++++++++-
 ct/homeassistant-v4.sh                | 12 +++++++++++-
 ct/homebridge-v4.sh                   | 12 +++++++++++-
 ct/homepage-v4.sh                     | 12 +++++++++++-
 ct/influxdb-v4.sh                     | 12 +++++++++++-
 ct/iobroker-v4.sh                     | 12 +++++++++++-
 ct/jellyfin-v4.sh                     | 12 +++++++++++-
 ct/keycloak-v4.sh                     | 12 +++++++++++-
 ct/magicmirror-v4.sh                  | 12 +++++++++++-
 ct/mariadb-v4.sh                      | 12 +++++++++++-
 ct/meshcentral-v4.sh                  | 12 +++++++++++-
 ct/motioneye-v4.sh                    | 12 +++++++++++-
 ct/mqtt-v4.sh                         |  7 +++++--
 ct/n8n-v4.sh                          | 12 +++++++++++-
 ct/navidrome-v4.sh                    | 12 +++++++++++-
 ct/nextcloudpi-v4.sh                  | 12 +++++++++++-
 ct/nginx-proxy-manager-v4.sh          | 12 +++++++++++-
 ct/nocodb-v4.sh                       | 12 +++++++++++-
 ct/node-red-v4.sh                     | 12 +++++++++++-
 ct/omada-v4.sh                        | 12 +++++++++++-
 ct/omv-v4.sh                          | 12 +++++++++++-
 ct/openhab-v4.sh                      | 12 +++++++++++-
 ct/paperless-ngx-v4.sh                | 12 +++++++++++-
 ct/photoprism-v4.sh                   | 12 +++++++++++-
 ct/pihole-v4.sh                       | 12 +++++++++++-
 ct/plex-v4.sh                         | 12 +++++++++++-
 ct/podman-homeassistant-v4.sh         | 12 +++++++++++-
 ct/postgresql-v4.sh                   | 12 +++++++++++-
 ct/prometheus-v4.sh                   | 12 +++++++++++-
 ct/scrypted-v4.sh                     | 12 +++++++++++-
 ct/syncthing-v4.sh                    | 12 +++++++++++-
 ct/technitiumdns-v4.sh                | 12 +++++++++++-
 ct/trilium-v4.sh                      | 12 +++++++++++-
 ct/ubuntu-v4.sh                       | 12 +++++++++++-
 ct/umbrel-v4.sh                       | 12 +++++++++++-
 ct/unifi-v4.sh                        | 12 +++++++++++-
 ct/uptimekuma-v4.sh                   | 12 +++++++++++-
 ct/vaultwarden-v4.sh                  | 12 +++++++++++-
 ct/whoogle-v4.sh                      | 12 +++++++++++-
 ct/wikijs-v4.sh                       | 12 +++++++++++-
 ct/wireguard-v4.sh                    | 12 +++++++++++-
 ct/zigbee2mqtt-v4.sh                  | 12 +++++++++++-
 ct/zwave-js-ui-v4.sh                  | 12 +++++++++++-
 setup/adguard-install.sh              |  6 ++++++
 setup/blocky-install.sh               |  6 ++++++
 setup/casaos-install.sh               |  6 ++++++
 setup/daemonsync-install.sh           |  6 ++++++
 setup/dashy-install.sh                |  6 ++++++
 setup/deconz-install.sh               |  6 ++++++
 setup/docker-install.sh               |  6 ++++++
 setup/emby-install.sh                 |  6 ++++++
 setup/emqx-install.sh                 |  6 ++++++
 setup/esphome-install.sh              |  6 ++++++
 setup/grafana-install.sh              |  6 ++++++
 setup/grocy-install.sh                |  6 ++++++
 setup/heimdalldashboard-install.sh    |  6 ++++++
 setup/homeassistant-core-install.sh   |  6 ++++++
 setup/homeassistant-install.sh        |  6 ++++++
 setup/homebridge-install.sh           |  6 ++++++
 setup/homepage-install.sh             |  6 ++++++
 setup/influxdb-install.sh             |  6 ++++++
 setup/iobroker-install.sh             |  6 ++++++
 setup/jellyfin-install.sh             |  6 ++++++
 setup/keycloak-install.sh             |  6 ++++++
 setup/magicmirror-install.sh          |  6 ++++++
 setup/mariadb-install.sh              |  6 ++++++
 setup/meshcentral-install.sh          |  6 ++++++
 setup/motioneye-install.sh            |  6 ++++++
 setup/mqtt-install.sh                 |  6 ++++++
 setup/n8n-install.sh                  |  6 ++++++
 setup/navidrome-install.sh            |  6 ++++++
 setup/nextcloudpi-install.sh          |  6 ++++++
 setup/nginx-proxy-manager-install.sh  |  6 ++++++
 setup/nocodb-install.sh               |  6 ++++++
 setup/node-red-install.sh             |  6 ++++++
 setup/omada-install.sh                |  6 ++++++
 setup/omv-install.sh                  |  6 ++++++
 setup/openhab-install.sh              |  6 ++++++
 setup/photoprism-install.sh           |  6 ++++++
 setup/pihole-install.sh               |  6 ++++++
 setup/plex-install.sh                 |  6 ++++++
 setup/podman-homeassistant-install.sh |  6 ++++++
 setup/postgresql-install.sh           |  6 ++++++
 setup/prometheus-install.sh           |  6 ++++++
 setup/scrypted-install.sh             |  6 ++++++
 setup/syncthing-install.sh            |  6 ++++++
 setup/technitiumdns-install.sh        |  6 ++++++
 setup/trilium-install.sh              |  6 ++++++
 setup/ubuntu-install.sh               |  6 ++++++
 setup/umbrel-install.sh               |  6 ++++++
 setup/unifi-install.sh                |  6 ++++++
 setup/uptimekuma-install.sh           |  6 ++++++
 setup/vaultwarden-install.sh          |  6 ++++++
 setup/whoogle-install.sh              |  6 ++++++
 setup/wikijs-install.sh               |  6 ++++++
 setup/wireguard-install.sh            |  6 ++++++
 setup/zigbee2mqtt-install.sh          |  6 ++++++
 setup/zwave-js-ui-install.sh          |  6 ++++++
 113 files changed, 962 insertions(+), 59 deletions(-)

diff --git a/ct/adguard-v4.sh b/ct/adguard-v4.sh
index 60b4e089..5d67195f 100644
--- a/ct/adguard-v4.sh
+++ b/ct/adguard-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/alpine-v4.sh b/ct/alpine-v4.sh
index 11f8f2e7..546de0ad 100644
--- a/ct/alpine-v4.sh
+++ b/ct/alpine-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -208,6 +210,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -237,6 +246,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/archlinux-v4.sh b/ct/archlinux-v4.sh
index 6d3243ca..4b33de51 100644
--- a/ct/archlinux-v4.sh
+++ b/ct/archlinux-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/blocky-v4.sh b/ct/blocky-v4.sh
index ff4f3475..b861c58a 100644
--- a/ct/blocky-v4.sh
+++ b/ct/blocky-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/casaos-v4.sh b/ct/casaos-v4.sh
index e1e701f6..2ac17453 100644
--- a/ct/casaos-v4.sh
+++ b/ct/casaos-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/daemonsync-v4.sh b/ct/daemonsync-v4.sh
index 820267f4..27e49b1f 100644
--- a/ct/daemonsync-v4.sh
+++ b/ct/daemonsync-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/dashy-v4.sh b/ct/dashy-v4.sh
index fa6e0ad6..abb1eae3 100644
--- a/ct/dashy-v4.sh
+++ b/ct/dashy-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/deconz-v4.sh b/ct/deconz-v4.sh
index 2605ceae..1b9d3f1a 100644
--- a/ct/deconz-v4.sh
+++ b/ct/deconz-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/docker-v4.sh b/ct/docker-v4.sh
index 1e598396..d65fd6a0 100644
--- a/ct/docker-v4.sh
+++ b/ct/docker-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/emby-v4.sh b/ct/emby-v4.sh
index 7bd7cced..354d640b 100644
--- a/ct/emby-v4.sh
+++ b/ct/emby-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/emqx-v4.sh b/ct/emqx-v4.sh
index 0a79efcf..fcc35a86 100644
--- a/ct/emqx-v4.sh
+++ b/ct/emqx-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/esphome-v4.sh b/ct/esphome-v4.sh
index 95c5b25e..2429f988 100644
--- a/ct/esphome-v4.sh
+++ b/ct/esphome-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/grafana-v4.sh b/ct/grafana-v4.sh
index 6762da87..0678a118 100644
--- a/ct/grafana-v4.sh
+++ b/ct/grafana-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/grocy-v4.sh b/ct/grocy-v4.sh
index f1ed2e1d..e41ada96 100644
--- a/ct/grocy-v4.sh
+++ b/ct/grocy-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/heimdalldashboard-v4.sh b/ct/heimdalldashboard-v4.sh
index 7912b71b..8c831979 100644
--- a/ct/heimdalldashboard-v4.sh
+++ b/ct/heimdalldashboard-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homeassistant-core-v4.sh b/ct/homeassistant-core-v4.sh
index 4098d9c0..fd3bb250 100644
--- a/ct/homeassistant-core-v4.sh
+++ b/ct/homeassistant-core-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homeassistant-v4.sh b/ct/homeassistant-v4.sh
index 77b128df..a7d1fb71 100644
--- a/ct/homeassistant-v4.sh
+++ b/ct/homeassistant-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homebridge-v4.sh b/ct/homebridge-v4.sh
index 861bc448..0b7510f2 100644
--- a/ct/homebridge-v4.sh
+++ b/ct/homebridge-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/homepage-v4.sh b/ct/homepage-v4.sh
index 9c92edc8..7781857f 100644
--- a/ct/homepage-v4.sh
+++ b/ct/homepage-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/influxdb-v4.sh b/ct/influxdb-v4.sh
index 74121380..25cb3a3d 100644
--- a/ct/influxdb-v4.sh
+++ b/ct/influxdb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/iobroker-v4.sh b/ct/iobroker-v4.sh
index 43436724..5b5d78b7 100644
--- a/ct/iobroker-v4.sh
+++ b/ct/iobroker-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/jellyfin-v4.sh b/ct/jellyfin-v4.sh
index 21af5b44..9ebf41d8 100644
--- a/ct/jellyfin-v4.sh
+++ b/ct/jellyfin-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/keycloak-v4.sh b/ct/keycloak-v4.sh
index 63d553f5..0b9babff 100644
--- a/ct/keycloak-v4.sh
+++ b/ct/keycloak-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/magicmirror-v4.sh b/ct/magicmirror-v4.sh
index 5a52a4de..78bd04a7 100644
--- a/ct/magicmirror-v4.sh
+++ b/ct/magicmirror-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/mariadb-v4.sh b/ct/mariadb-v4.sh
index b2db3d31..a1201a89 100644
--- a/ct/mariadb-v4.sh
+++ b/ct/mariadb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/meshcentral-v4.sh b/ct/meshcentral-v4.sh
index a7b6767c..885a8a3c 100644
--- a/ct/meshcentral-v4.sh
+++ b/ct/meshcentral-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/motioneye-v4.sh b/ct/motioneye-v4.sh
index 4834b42e..d75d9e52 100644
--- a/ct/motioneye-v4.sh
+++ b/ct/motioneye-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/mqtt-v4.sh b/ct/mqtt-v4.sh
index c9b3cfe6..dcdc2f71 100644
--- a/ct/mqtt-v4.sh
+++ b/ct/mqtt-v4.sh
@@ -93,7 +93,9 @@ function default_settings() {
 		MAC=""
     echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
     VLAN=""
-		echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
+		  echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
+  echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
 CT_TYPE=$(whiptail --title "CONTAINER TYPE" --radiolist --cancel-button Exit-Script "Choose Type" 8 58 2 \
@@ -104,7 +106,7 @@ exitstatus=$?
 if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
 fi
-PW1=$(whiptail --inputbox "Set Root Password" 8 58  --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58  --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
 exitstatus=$?
 if [ $exitstatus = 0 ]; then
   if [ -z $PW1 ]; then PW1="Automatic Login" PW=" ";
@@ -216,6 +218,7 @@ if [ "$CT_TYPE" == "1" ]; then
  fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/n8n-v4.sh b/ct/n8n-v4.sh
index c1f88353..18e74805 100644
--- a/ct/n8n-v4.sh
+++ b/ct/n8n-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/navidrome-v4.sh b/ct/navidrome-v4.sh
index 57bfe2a0..3e6d737f 100644
--- a/ct/navidrome-v4.sh
+++ b/ct/navidrome-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nextcloudpi-v4.sh b/ct/nextcloudpi-v4.sh
index 68e5aed5..d2b8d7a2 100644
--- a/ct/nextcloudpi-v4.sh
+++ b/ct/nextcloudpi-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nginx-proxy-manager-v4.sh b/ct/nginx-proxy-manager-v4.sh
index 8e316769..bf9c0037 100644
--- a/ct/nginx-proxy-manager-v4.sh
+++ b/ct/nginx-proxy-manager-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/nocodb-v4.sh b/ct/nocodb-v4.sh
index 8c58f846..ba516ee4 100644
--- a/ct/nocodb-v4.sh
+++ b/ct/nocodb-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/node-red-v4.sh b/ct/node-red-v4.sh
index 434bd642..c95cc54b 100644
--- a/ct/node-red-v4.sh
+++ b/ct/node-red-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/omada-v4.sh b/ct/omada-v4.sh
index 7ef80131..ae0a1faf 100644
--- a/ct/omada-v4.sh
+++ b/ct/omada-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -113,7 +115,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -220,6 +222,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -249,6 +258,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/omv-v4.sh b/ct/omv-v4.sh
index 2d58a0ad..628f4c11 100644
--- a/ct/omv-v4.sh
+++ b/ct/omv-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/openhab-v4.sh b/ct/openhab-v4.sh
index fb07b1fd..d120b45d 100644
--- a/ct/openhab-v4.sh
+++ b/ct/openhab-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/paperless-ngx-v4.sh b/ct/paperless-ngx-v4.sh
index f735b822..53ea9807 100644
--- a/ct/paperless-ngx-v4.sh
+++ b/ct/paperless-ngx-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/photoprism-v4.sh b/ct/photoprism-v4.sh
index 69b2fd5e..217d1a31 100644
--- a/ct/photoprism-v4.sh
+++ b/ct/photoprism-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/pihole-v4.sh b/ct/pihole-v4.sh
index 65b1df79..83c7b06f 100644
--- a/ct/pihole-v4.sh
+++ b/ct/pihole-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/plex-v4.sh b/ct/plex-v4.sh
index 71891a0f..d1798958 100644
--- a/ct/plex-v4.sh
+++ b/ct/plex-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -114,7 +116,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -221,6 +223,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -250,6 +259,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/podman-homeassistant-v4.sh b/ct/podman-homeassistant-v4.sh
index 87bf6dea..bad2ad8f 100644
--- a/ct/podman-homeassistant-v4.sh
+++ b/ct/podman-homeassistant-v4.sh
@@ -97,6 +97,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -108,7 +110,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -215,6 +217,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -244,6 +253,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/postgresql-v4.sh b/ct/postgresql-v4.sh
index 9fc542d3..ab0fa879 100644
--- a/ct/postgresql-v4.sh
+++ b/ct/postgresql-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/prometheus-v4.sh b/ct/prometheus-v4.sh
index f17864ae..4d1c7e05 100644
--- a/ct/prometheus-v4.sh
+++ b/ct/prometheus-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/scrypted-v4.sh b/ct/scrypted-v4.sh
index a9de8c1c..4f1b213c 100644
--- a/ct/scrypted-v4.sh
+++ b/ct/scrypted-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/syncthing-v4.sh b/ct/syncthing-v4.sh
index e20ee8df..9084cd49 100644
--- a/ct/syncthing-v4.sh
+++ b/ct/syncthing-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -106,7 +108,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -213,6 +215,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -242,6 +251,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/technitiumdns-v4.sh b/ct/technitiumdns-v4.sh
index 7d36387e..5bcd7bfe 100644
--- a/ct/technitiumdns-v4.sh
+++ b/ct/technitiumdns-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/trilium-v4.sh b/ct/trilium-v4.sh
index b64d1333..fa2f31de 100644
--- a/ct/trilium-v4.sh
+++ b/ct/trilium-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/ubuntu-v4.sh b/ct/ubuntu-v4.sh
index 1cd16c05..182cdd21 100644
--- a/ct/ubuntu-v4.sh
+++ b/ct/ubuntu-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -113,7 +115,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -220,6 +222,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -249,6 +258,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/umbrel-v4.sh b/ct/umbrel-v4.sh
index f9591a5f..2d876e87 100644
--- a/ct/umbrel-v4.sh
+++ b/ct/umbrel-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/unifi-v4.sh b/ct/unifi-v4.sh
index 0051f6a5..2d2582ad 100644
--- a/ct/unifi-v4.sh
+++ b/ct/unifi-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/uptimekuma-v4.sh b/ct/uptimekuma-v4.sh
index f1779f12..fd2ee780 100644
--- a/ct/uptimekuma-v4.sh
+++ b/ct/uptimekuma-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/vaultwarden-v4.sh b/ct/vaultwarden-v4.sh
index 1de5fc5d..c64c257a 100644
--- a/ct/vaultwarden-v4.sh
+++ b/ct/vaultwarden-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/whoogle-v4.sh b/ct/whoogle-v4.sh
index 9527d486..0d35cb1b 100644
--- a/ct/whoogle-v4.sh
+++ b/ct/whoogle-v4.sh
@@ -93,6 +93,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -104,7 +106,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -211,6 +213,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -240,6 +249,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/wikijs-v4.sh b/ct/wikijs-v4.sh
index b4b50eff..df631e62 100644
--- a/ct/wikijs-v4.sh
+++ b/ct/wikijs-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/wireguard-v4.sh b/ct/wireguard-v4.sh
index 38e82951..7b3bc459 100644
--- a/ct/wireguard-v4.sh
+++ b/ct/wireguard-v4.sh
@@ -95,6 +95,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -106,7 +108,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -213,6 +215,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -242,6 +251,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/zigbee2mqtt-v4.sh b/ct/zigbee2mqtt-v4.sh
index d19c5a03..335bf03e 100644
--- a/ct/zigbee2mqtt-v4.sh
+++ b/ct/zigbee2mqtt-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/ct/zwave-js-ui-v4.sh b/ct/zwave-js-ui-v4.sh
index 0f2af7ab..8442a1ec 100644
--- a/ct/zwave-js-ui-v4.sh
+++ b/ct/zwave-js-ui-v4.sh
@@ -94,6 +94,8 @@ function default_settings() {
   MAC=""
   echo -e "${DGN}Using VLAN Tag: ${BGN}Default${CL}"
   VLAN=""
+    echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+  SSH="no"
   echo -e "${BL}Creating a ${APP} LXC using the above default settings${CL}"
 }
 function advanced_settings() {
@@ -105,7 +107,7 @@ function advanced_settings() {
   if [ $exitstatus = 0 ]; then
     echo -e "${DGN}Using Container Type: ${BGN}$CT_TYPE${CL}"
   fi
-  PW1=$(whiptail --inputbox "Set Root Password" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
+  PW1=$(whiptail --inputbox "Set Root Password (needed for root ssh access)" 8 58 --title "PASSWORD(leave blank for automatic login)" --cancel-button Exit-Script 3>&1 1>&2 2>&3)
   exitstatus=$?
   if [ $exitstatus = 0 ]; then
     if [ -z $PW1 ]; then
@@ -212,6 +214,13 @@ function advanced_settings() {
       echo -e "${DGN}Using Vlan: ${BGN}$VLAN1${CL}"
     fi
   fi
+  if (whiptail --defaultno --title "SSH ACCESS" --yesno "Enable Root SSH Access?" 10 58); then
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}Yes${CL}"
+      SSH="yes"
+  else
+      echo -e "${DGN}Enable Root SSH Access: ${BGN}No${CL}"
+      SSH="no"
+  fi
   if (whiptail --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create ${APP} LXC?" --no-button Do-Over 10 58); then
     echo -e "${RD}Creating a ${APP} LXC using the above advanced settings${CL}"
   else
@@ -241,6 +250,7 @@ else
 fi
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
+export SSH_ROOT=${SSH}
 export CTID=$CT_ID
 export PCT_OSTYPE=$var_os
 export PCT_OSVERSION=$var_version
diff --git a/setup/adguard-install.sh b/setup/adguard-install.sh
index e7b481e6..ec248d10 100644
--- a/setup/adguard-install.sh
+++ b/setup/adguard-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/blocky-install.sh b/setup/blocky-install.sh
index dd78ada9..39690a37 100644
--- a/setup/blocky-install.sh
+++ b/setup/blocky-install.sh
@@ -362,6 +362,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/casaos-install.sh b/setup/casaos-install.sh
index 41d64917..dbd62604 100644
--- a/setup/casaos-install.sh
+++ b/setup/casaos-install.sh
@@ -115,6 +115,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/daemonsync-install.sh b/setup/daemonsync-install.sh
index 16e696bc..ef0b5f9b 100644
--- a/setup/daemonsync-install.sh
+++ b/setup/daemonsync-install.sh
@@ -108,6 +108,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/dashy-install.sh b/setup/dashy-install.sh
index cd843b0a..7bd1c5a0 100644
--- a/setup/dashy-install.sh
+++ b/setup/dashy-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/deconz-install.sh b/setup/deconz-install.sh
index f1cc5feb..476a61a9 100644
--- a/setup/deconz-install.sh
+++ b/setup/deconz-install.sh
@@ -132,6 +132,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/docker-install.sh b/setup/docker-install.sh
index 4cb1e052..6fc265d4 100644
--- a/setup/docker-install.sh
+++ b/setup/docker-install.sh
@@ -158,6 +158,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/emby-install.sh b/setup/emby-install.sh
index a61e4a59..1c0b0622 100644
--- a/setup/emby-install.sh
+++ b/setup/emby-install.sh
@@ -121,6 +121,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/emqx-install.sh b/setup/emqx-install.sh
index 009445be..da49201b 100644
--- a/setup/emqx-install.sh
+++ b/setup/emqx-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/esphome-install.sh b/setup/esphome-install.sh
index 505a5bbf..15160dce 100644
--- a/setup/esphome-install.sh
+++ b/setup/esphome-install.sh
@@ -128,6 +128,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/grafana-install.sh b/setup/grafana-install.sh
index 7eb61aee..0570d690 100644
--- a/setup/grafana-install.sh
+++ b/setup/grafana-install.sh
@@ -115,6 +115,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 systemctl start grafana-server
 systemctl enable grafana-server.service &>/dev/null
 
diff --git a/setup/grocy-install.sh b/setup/grocy-install.sh
index c15713dc..20166eb0 100644
--- a/setup/grocy-install.sh
+++ b/setup/grocy-install.sh
@@ -144,6 +144,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/heimdalldashboard-install.sh b/setup/heimdalldashboard-install.sh
index c177c361..4f57ac50 100644
--- a/setup/heimdalldashboard-install.sh
+++ b/setup/heimdalldashboard-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homeassistant-core-install.sh b/setup/homeassistant-core-install.sh
index e07419e5..956db032 100644
--- a/setup/homeassistant-core-install.sh
+++ b/setup/homeassistant-core-install.sh
@@ -146,6 +146,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homeassistant-install.sh b/setup/homeassistant-install.sh
index bef7e7f1..6e78f010 100644
--- a/setup/homeassistant-install.sh
+++ b/setup/homeassistant-install.sh
@@ -342,6 +342,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homebridge-install.sh b/setup/homebridge-install.sh
index bfbe73a2..f6ab776c 100644
--- a/setup/homebridge-install.sh
+++ b/setup/homebridge-install.sh
@@ -118,6 +118,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/homepage-install.sh b/setup/homepage-install.sh
index f6a4d605..80c4ef20 100644
--- a/setup/homepage-install.sh
+++ b/setup/homepage-install.sh
@@ -136,6 +136,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/influxdb-install.sh b/setup/influxdb-install.sh
index e050e093..7e8aab4c 100644
--- a/setup/influxdb-install.sh
+++ b/setup/influxdb-install.sh
@@ -139,6 +139,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/iobroker-install.sh b/setup/iobroker-install.sh
index 428d7f32..271401b6 100644
--- a/setup/iobroker-install.sh
+++ b/setup/iobroker-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/jellyfin-install.sh b/setup/jellyfin-install.sh
index 040652bd..b9e9de7a 100644
--- a/setup/jellyfin-install.sh
+++ b/setup/jellyfin-install.sh
@@ -146,6 +146,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/keycloak-install.sh b/setup/keycloak-install.sh
index fd90691d..b72f14fe 100644
--- a/setup/keycloak-install.sh
+++ b/setup/keycloak-install.sh
@@ -127,6 +127,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/magicmirror-install.sh b/setup/magicmirror-install.sh
index cf71719d..a1ab2eec 100644
--- a/setup/magicmirror-install.sh
+++ b/setup/magicmirror-install.sh
@@ -223,6 +223,12 @@ EOF
         systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
         msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/mariadb-install.sh b/setup/mariadb-install.sh
index 2c120f3a..b4e261ce 100644
--- a/setup/mariadb-install.sh
+++ b/setup/mariadb-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/meshcentral-install.sh b/setup/meshcentral-install.sh
index 40fe2bb6..1e5789be 100644
--- a/setup/meshcentral-install.sh
+++ b/setup/meshcentral-install.sh
@@ -117,6 +117,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/motioneye-install.sh b/setup/motioneye-install.sh
index 136c611f..f718adc4 100644
--- a/setup/motioneye-install.sh
+++ b/setup/motioneye-install.sh
@@ -136,6 +136,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/mqtt-install.sh b/setup/mqtt-install.sh
index 0a2facd6..180b0c45 100644
--- a/setup/mqtt-install.sh
+++ b/setup/mqtt-install.sh
@@ -113,6 +113,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/n8n-install.sh b/setup/n8n-install.sh
index 30e8f176..70e4b615 100644
--- a/setup/n8n-install.sh
+++ b/setup/n8n-install.sh
@@ -129,6 +129,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/navidrome-install.sh b/setup/navidrome-install.sh
index 75676fde..b6cc28e5 100644
--- a/setup/navidrome-install.sh
+++ b/setup/navidrome-install.sh
@@ -155,6 +155,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/nextcloudpi-install.sh b/setup/nextcloudpi-install.sh
index 543510d6..c5f63f65 100644
--- a/setup/nextcloudpi-install.sh
+++ b/setup/nextcloudpi-install.sh
@@ -104,6 +104,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/nginx-proxy-manager-install.sh b/setup/nginx-proxy-manager-install.sh
index 2b4da548..9fc27d3d 100644
--- a/setup/nginx-proxy-manager-install.sh
+++ b/setup/nginx-proxy-manager-install.sh
@@ -261,6 +261,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Starting Services"
 systemctl enable npm &>/dev/null
diff --git a/setup/nocodb-install.sh b/setup/nocodb-install.sh
index 9030ac93..be07ed72 100644
--- a/setup/nocodb-install.sh
+++ b/setup/nocodb-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/node-red-install.sh b/setup/node-red-install.sh
index 8373a0e6..8e7257ec 100644
--- a/setup/node-red-install.sh
+++ b/setup/node-red-install.sh
@@ -137,6 +137,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/omada-install.sh b/setup/omada-install.sh
index 7a6c7db4..0fd4551e 100644
--- a/setup/omada-install.sh
+++ b/setup/omada-install.sh
@@ -111,6 +111,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/omv-install.sh b/setup/omv-install.sh
index 513290b3..f5bf3267 100644
--- a/setup/omv-install.sh
+++ b/setup/omv-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/openhab-install.sh b/setup/openhab-install.sh
index a799182d..082db069 100644
--- a/setup/openhab-install.sh
+++ b/setup/openhab-install.sh
@@ -123,6 +123,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/photoprism-install.sh b/setup/photoprism-install.sh
index af60ccc0..85349d25 100644
--- a/setup/photoprism-install.sh
+++ b/setup/photoprism-install.sh
@@ -196,6 +196,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/pihole-install.sh b/setup/pihole-install.sh
index 742e1b5f..a43a230e 100644
--- a/setup/pihole-install.sh
+++ b/setup/pihole-install.sh
@@ -126,6 +126,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/plex-install.sh b/setup/plex-install.sh
index 881d75ac..fad4c048 100644
--- a/setup/plex-install.sh
+++ b/setup/plex-install.sh
@@ -125,6 +125,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/podman-homeassistant-install.sh b/setup/podman-homeassistant-install.sh
index 45999889..c7e09cd7 100644
--- a/setup/podman-homeassistant-install.sh
+++ b/setup/podman-homeassistant-install.sh
@@ -159,6 +159,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/postgresql-install.sh b/setup/postgresql-install.sh
index dd191991..8587b17c 100644
--- a/setup/postgresql-install.sh
+++ b/setup/postgresql-install.sh
@@ -230,6 +230,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/prometheus-install.sh b/setup/prometheus-install.sh
index 8937ded9..8b3f7907 100644
--- a/setup/prometheus-install.sh
+++ b/setup/prometheus-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/scrypted-install.sh b/setup/scrypted-install.sh
index 9b2e5e33..b9b9223f 100644
--- a/setup/scrypted-install.sh
+++ b/setup/scrypted-install.sh
@@ -194,6 +194,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/syncthing-install.sh b/setup/syncthing-install.sh
index d0cb5005..cb3b2113 100644
--- a/setup/syncthing-install.sh
+++ b/setup/syncthing-install.sh
@@ -109,6 +109,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/technitiumdns-install.sh b/setup/technitiumdns-install.sh
index 12c78df6..ab51a406 100644
--- a/setup/technitiumdns-install.sh
+++ b/setup/technitiumdns-install.sh
@@ -106,6 +106,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/trilium-install.sh b/setup/trilium-install.sh
index bf5a1f78..f62528e7 100644
--- a/setup/trilium-install.sh
+++ b/setup/trilium-install.sh
@@ -130,6 +130,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/ubuntu-install.sh b/setup/ubuntu-install.sh
index 85c25805..9b7597ba 100644
--- a/setup/ubuntu-install.sh
+++ b/setup/ubuntu-install.sh
@@ -101,6 +101,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/umbrel-install.sh b/setup/umbrel-install.sh
index fa7f6cef..e233a6a7 100644
--- a/setup/umbrel-install.sh
+++ b/setup/umbrel-install.sh
@@ -116,6 +116,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
 apt-get autoclean >/dev/null
diff --git a/setup/unifi-install.sh b/setup/unifi-install.sh
index 2adeda07..0a7f87e3 100644
--- a/setup/unifi-install.sh
+++ b/setup/unifi-install.sh
@@ -114,6 +114,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/uptimekuma-install.sh b/setup/uptimekuma-install.sh
index b0fbd824..a7305c9e 100644
--- a/setup/uptimekuma-install.sh
+++ b/setup/uptimekuma-install.sh
@@ -135,6 +135,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/vaultwarden-install.sh b/setup/vaultwarden-install.sh
index 81599329..bcd58970 100644
--- a/setup/vaultwarden-install.sh
+++ b/setup/vaultwarden-install.sh
@@ -191,6 +191,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/whoogle-install.sh b/setup/whoogle-install.sh
index 4c324c89..3971ce10 100644
--- a/setup/whoogle-install.sh
+++ b/setup/whoogle-install.sh
@@ -122,6 +122,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/wikijs-install.sh b/setup/wikijs-install.sh
index 850bb44b..01d3df47 100644
--- a/setup/wikijs-install.sh
+++ b/setup/wikijs-install.sh
@@ -151,6 +151,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/wireguard-install.sh b/setup/wireguard-install.sh
index 45206a29..6d726417 100644
--- a/setup/wireguard-install.sh
+++ b/setup/wireguard-install.sh
@@ -165,6 +165,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/zigbee2mqtt-install.sh b/setup/zigbee2mqtt-install.sh
index b6859a5d..910dffb4 100644
--- a/setup/zigbee2mqtt-install.sh
+++ b/setup/zigbee2mqtt-install.sh
@@ -151,6 +151,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 apt-get autoremove >/dev/null
diff --git a/setup/zwave-js-ui-install.sh b/setup/zwave-js-ui-install.sh
index 52800dbc..68ab1885 100644
--- a/setup/zwave-js-ui-install.sh
+++ b/setup/zwave-js-ui-install.sh
@@ -127,6 +127,12 @@ EOF
   systemctl restart $(basename $(dirname $GETTY_OVERRIDE) | sed 's/\.d//')
   msg_ok "Customized Container"
 fi
+if [[ "${SSH_ROOT}" == "yes" ]]; then
+    cat <<EOF >>/etc/ssh/sshd_config
+PermitRootLogin yes
+EOF
+systemctl restart sshd
+fi
 
 msg_info "Cleaning up"
 rm zwave-js-ui-${RELEASE}-linux.zip