# jump-box

## GUI (XFCE over RDP) first-time setup

1. **Set a password for RDP logins:** Generate a hash and mount it at `/etc/xrdp/secrets/password-hash`:
   ```sh
   openssl passwd -6 > password-hash
   ```
2. **Optional: mount a persistent TLS cert** as `cert.pem` + `key.pem` under `/etc/xrdp/tls/`
   ```sh
   openssl req -x509 -newkey rsa:3072 -nodes -days 3650 -keyout key.pem -out cert.pem -subj "/CN=jump-box"
   ```
3. **Expose the port:** expose TCP `3389`.
4. **Optional iGPU setup:** Pass through `/dev/dri`; the user is added to its render group on boot.
5. **Connect:** For Remmina, set colour depth to "GFX AVC444" and network type to "Automatic detection" to get H.264