GUI support

jump-box/README.md

@@ -0,0 +1,15 @@
+# jump-box
+
+## GUI (XFCE over RDP) first-time setup
+
+1. **Set a password for RDP logins:** Generate a hash and mount it at `/etc/xrdp/secrets/password-hash`:
+   ```sh
+   openssl passwd -6 > password-hash
+   ```
+2. **Optional: mount a persistent TLS cert** as `cert.pem` + `key.pem` under `/etc/xrdp/tls/`
+   ```sh
+   openssl req -x509 -newkey rsa:3072 -nodes -days 3650 -keyout key.pem -out cert.pem -subj "/CN=jump-box"
+   ```
+3. **Expose the port:** expose TCP `3389`.
+4. **Optional iGPU setup:** Pass through `/dev/dri`; the user is added to its render group on boot.
+5. **Connect:** For Remmina, set colour depth to "GFX AVC444" and network type to "Automatic detection" to get H.264