diff --git a/configs/network/.category b/configs/network/.category
index 29ed2fa..a9d2fff 100755
--- a/configs/network/.category
+++ b/configs/network/.category
@@ -2,4 +2,4 @@ TITLE=Network
 DESCRIPTION=Network configuration and domain management
 ICON=network
 ORDER=4
-SUBCATEGORY_ORDER=network_domains,network_whitelist,network_dns,network_docker,network_ports,network_headscale
+SUBCATEGORY_ORDER=network_domains,network_whitelist,network_dns,network_docker,network_rootless,network_ports,network_headscale
diff --git a/configs/network/network_docker b/configs/network/network_docker
index 802504e..9eaf31f 100755
--- a/configs/network/network_docker
+++ b/configs/network/network_docker
@@ -5,4 +5,3 @@
 CFG_NETWORK_NAME=vpn                                     # Network Name - Docker network name for container communication
 CFG_NETWORK_SUBNET=10.100.0.0/16                         # Network Subnet - Subnet range for Docker network
 CFG_NETWORK_MTU=1500                                     # Network MTU - Maximum transmission unit for network packets
-CFG_ROOTLESS_NET=pasta                                   # Rootless Network Driver - Network stack for rootless Docker; pasta (default): faster and preserves the real client source IP; slirp4netns: legacy fallback if pasta misbehaves. The matching rootlesskit port driver is selected automatically. [pasta:Pasta (recommended)|slirp4netns:slirp4netns (fallback)]
diff --git a/configs/network/network_rootless b/configs/network/network_rootless
new file mode 100644
index 0000000..6c99cec
--- /dev/null
+++ b/configs/network/network_rootless
@@ -0,0 +1,5 @@
+# ================================================================================
+# Rootless Networking - Network stack and behaviour for rootless Docker **ADVANCED**
+# ================================================================================
+
+CFG_ROOTLESS_NET=pasta                                   # Rootless Network Driver - Network stack for rootless Docker; pasta (default): faster and preserves the real client source IP; slirp4netns: legacy fallback if pasta misbehaves. The matching rootlesskit port driver is selected automatically. **ADVANCED** [pasta:Pasta (recommended)|slirp4netns:slirp4netns (fallback)]