Nice and relatively easy box - esp. compared to the nightmare of Ghoul I did before.
Stick to the roots of what you find, do some research of the api on the upper port and find the needle in that haystack 
for root: There’s no need to change any config! If you do you (and all others!) won’t succeed. Read what you find in that specific dir after getting another user, do some more research and put all together. It’s quite straight forward.
As always: PM for nudges 