This looks interesting. One small point of suggestion would be to add a script or code snippet that runs the first time the system is initialized to set a long

This looks interesting. One small point of suggestion would be to add a script or code snippet that runs the first time the system is initialized to set a long random password and output the long random password to the console during the installation instead of using changeme which most web vulnerability scanners already try to use.