From 22b998460701bb320b0de2b55b9a3d63e4b7b5f9 Mon Sep 17 00:00:00 2001
From: s3lph <account-gitlab-ideynizv@kernelpanic.lol>
Date: Wed, 3 Nov 2021 00:21:21 +0100
Subject: [PATCH] postfixadmin: make setup password hash idempotent

---
 roles/postfixadmin/templates/config.local.php.j2 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/postfixadmin/templates/config.local.php.j2 b/roles/postfixadmin/templates/config.local.php.j2
index a6dc827..2275835 100644
--- a/roles/postfixadmin/templates/config.local.php.j2
+++ b/roles/postfixadmin/templates/config.local.php.j2
@@ -1,9 +1,10 @@
 <?php
 
 {{ ansible_managed | comment(decoration='// ') }}
+{% set _salt = inventory_hostname | | hash("sha512") | regex_replace("^(.{22}).*$", "\1") %}
 
 $CONF['configured'] = true;
-$CONF['setup_password'] = '{{ postfixadmin_setup_password | password_hash("bcrypt", 65534 | random(seed=inventory_hostname) | string) }}';
+$CONF['setup_password'] = '{{ postfixadmin_setup_password | password_hash("bcrypt", _salt) }}';
 
 $CONF['default_language'] = '{{ postfixadmin_default_language }}';