Add one-time SSH hardening notice after forced password change

2026-01-02 23:29:17 -05:00
parent 0a23902eb0
commit bc97e0374f
3 changed files with 24 additions and 0 deletions
--- a/docs/workflow.md
+++ b/docs/workflow.md
@@ -93,3 +93,4 @@ Use the helper:
 - Profiles are additive to the base image defaults; do not include Pi‑Kit or DietPi dashboard entries in profiles.
 - Keep `RESCUE.md` in `/root` and `/home/dietpi` only (not in `/var/www`).
 - Prep enforces a password change for `dietpi` on first login; set `PIKIT_FORCE_PASSWORD_CHANGE=0` to skip.
+- After the password change, a one‑time SSH hardening tip is shown on login.