diff --git a/scripts/install.sh b/scripts/install.sh
index cb73dbf..3b4c9c7 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -120,6 +120,7 @@ sudo sed -i 's/#PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/ss
 sudo sed -i 's/PasswordAuthentication.*/PasswordAuthentication no/' /etc/ssh/sshd_config
 sudo sed -i 's/#PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
 sudo sed -i 's/PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
+sudo systemctl enable ssh
 sudo systemctl restart ssh
 
 # Additional tools fail2ban
@@ -160,6 +161,9 @@ figlet "Mistborn default NIC: $iface"
 #IPV4_PUBLIC=$(ip -o -4 route show default | egrep -o 'dev [^ ]*' | awk '{print $2}' | xargs ip -4 addr show | grep 'inet ' | awk '{print $2}' | grep -o "^[0-9.]*"  | tr -cd '\11\12\15\40-\176' | head -1) # tail -1 to get last
 IPV4_PUBLIC="10.2.3.1"
 
+# clean docker volumes, etc.
+sudo systemctl stop docker
+
 # clean
 if [ -f "/etc/systemd/system/Mistborn-base.service" ]; then
     sudo systemctl stop Mistborn*.service 2>/dev/null || true
@@ -176,6 +180,8 @@ if [ ! -d ./.envs/.production ]; then
     ./scripts/subinstallers/gen_prod_env.sh "$MISTBORN_DEFAULT_PASSWORD"
 fi
 
+sudo systemctl restart docker
+
 # unattended upgrades
 sudo cp ./scripts/conf/20auto-upgrades /etc/apt/apt.conf.d/
 sudo cp ./scripts/conf/50unattended-upgrades /etc/apt/apt.conf.d/