Fix SSH choice and image build safeguards

x86_64/README.md

@@ -86,7 +86,7 @@ The Stormux repository key is also embedded in the ISO at `/usr/share/stormux/st
 - **Fenrir screen reader** starts automatically (not speakup)
 - **Pipewire audio** properly initialized before Fenrir starts
 - **Speech-dispatcher** integration for speech synthesis
-- GRUB plays an audible tune on boot for accessibility
+- The UEFI systemd-boot menu enables its audible beep
 - Boot menu defaults to accessible entry
 - Service startup order ensures audio is ready before screen reader
 - First-login live-environment setup calibrates volume, checks networking and time, then offers to run the installer
@@ -165,7 +165,7 @@ Edit `packages.x86_64` and add package names (one per line).
 ### Modifying Boot Configuration
 
 - BIOS: Edit `syslinux/archiso_sys-linux.cfg`
-- UEFI: Edit `grub/grub.cfg`
+- UEFI: Edit `efiboot/loader/loader.conf` and entries under `efiboot/loader/entries/`
 
 ### Adding Overlay Files
 

x86_64/airootfs/usr/local/bin/install-stormux

@@ -1786,7 +1786,6 @@ systemctl enable NetworkManager.service
 systemctl enable brltty.path
 systemctl enable fenrirscreenreader.service
 systemctl enable cronie.service
-systemctl enable ssh-login-monitor.service
 
 # Enable bluetooth if present
 if ! systemctl enable bluetooth.service; then
@@ -1795,8 +1794,12 @@ fi
 
 # Enable SSH if requested
 if [[ "${enableSsh}" == "yes" ]]; then
-    systemctl enable sshd.service
+    systemctl enable sshd.service ssh-login-monitor.service
     echo "SSH server enabled"
+else
+    systemctl disable sshd.service ssh-login-monitor.service
+    systemctl disable sshd.socket 2> /dev/null || true
+    echo "SSH server disabled"
 fi
 
 # Setup desktop environment configurations