@madamada Yeah it’s not necessary most of the time unless you have to give access to someone who doesn’t also own the host machine.

It’s one case where the default influenced my behavior. My default LXCs in proxmox come with sshd by default and jails did not so I adapted.

In my case all VMs are in a VLAN at home and only the remote frontend can hit them with http(s) via a tunnel so having a ssh service or not doesn’t matter much as it’s not reachable from the outside.