create separate user for salt api pam auth

install.sh

@@ -7,6 +7,7 @@ fi
 
 
 DJANGO_SEKRET=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 50 | head -n 1)
+SALTPW=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 16 | head -n 1)
 
 GREEN='\033[0;32m'
 YELLOW='\033[1;33m'
@@ -32,8 +33,6 @@ echo -ne "${YELLOW}Create a username for the postgres database${NC}: "
 read pgusername
 echo -ne "${YELLOW}Create a password for the postgres database${NC}: "
 read pgpw
-echo -ne "${YELLOW}Enter your linux password for ${GREEN}${USER}${NC}: "
-read linuxpw
 echo -ne "${YELLOW}Enter the backend API domain for the rmm${NC}: "
 read rmmdomain
 echo -ne "${YELLOW}Enter the frontend  domain for the rmm${NC}: "
@@ -48,6 +47,12 @@ echo -ne "${YELLOW}Please use google authenticator and enter TOTP code${NC}: "
 read twofactor
 
 
+print_green 'Creating saltapi user'
+
+sudo adduser --no-create-home --disabled-password --gecos "" saltapi
+echo "saltapi:${SALTPW}" | sudo chpasswd
+
+
 print_green 'Installing Nginx'
 
 sudo add-apt-repository -y ppa:nginx/stable
@@ -198,8 +203,8 @@ EMAIL_HOST_PASSWORD = 'yourgmailpassword'
 EMAIL_PORT = 587
 EMAIL_ALERT_RECIPIENTS = ["jsmith@example.com",]
 
-SALT_USERNAME = "${USER}"
-SALT_PASSWORD = "${linuxpw}"
+SALT_USERNAME = "saltapi"
+SALT_PASSWORD = "${SALTPW}"
 MESH_USERNAME = "${meshusername}"
 MESH_SITE = "https://${meshdomain}"
 TWO_FACTOR_OTP = "${twofactor}"
@@ -375,7 +380,7 @@ gather_job_timeout: 30
 max_event_size: 30485760
 external_auth:
   pam:
-    ${USER}:
+    saltapi:
       - .*
       - '@runner'
       - '@wheel'