Three short steps. You can change any of it later in settings.
Read-only credentials are enough. Nothing is written back to it.
Allow our range through the firewall first, or the check below will time out.