diff --git a/lsio/openvscode-server/docker-compose.yaml b/lsio/openvscode-server/docker-compose.yaml
index 7118a21..a1c2ddb 100644
--- a/lsio/openvscode-server/docker-compose.yaml
+++ b/lsio/openvscode-server/docker-compose.yaml
@@ -19,6 +19,10 @@ services:
       - CONNECTION_TOKEN=supersecrettoken # optional
       # Optional path to a file inside the container that contains the security token for accessing the Web UI (ie. `/path/to/file`). Overrides `CONNECTION_TOKEN`.
       - CONNECTION_SECRET= # optional
+      # If this optional variable is set, user will have sudo access in the openvscode-server terminal with the specified password.
+      - SUDO_PASSWORD=password # optional
+      # Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`.
+      - SUDO_PASSWORD_HASH= # optional
     volumes:
       # Contains all relevant configuration files.
       - ${BASEDIR:-/volume1/docker}/openvscode-server/config:/config
diff --git a/lsio/openvscode-server/docker-run.sh b/lsio/openvscode-server/docker-run.sh
index aac895c..9621013 100644
--- a/lsio/openvscode-server/docker-run.sh
+++ b/lsio/openvscode-server/docker-run.sh
@@ -10,6 +10,8 @@ docker run -d \
   -e TZ=${TZ:-Europe/Amsterdam} `# Specify a timezone to use for example Europe/Amsterdam` \
   -e CONNECTION_TOKEN=supersecrettoken `# optional` `# Optional security token for accessing the Web UI.` \
   -e CONNECTION_SECRET= `# optional` `# Optional path to a file inside the container that contains the security token for accessing the Web UI (ie. `/path/to/file`). Overrides `CONNECTION_TOKEN`.` \
+  -e SUDO_PASSWORD=password `# optional` `# If this optional variable is set, user will have sudo access in the openvscode-server terminal with the specified password.` \
+  -e SUDO_PASSWORD_HASH= `# optional` `# Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`.` \
   -p 3000:3000 `# Web UI port.` \
   -v ${BASEDIR:-/volume1/docker}/openvscode-server/config:/config `# Contains all relevant configuration files.` \
   --restart unless-stopped \