From 7fc629c2a8eb1ee6f27247f18fb98dbc6a4cef5b Mon Sep 17 00:00:00 2001
From: Ludwig Lehnert <ludwig@lehnert.dev>
Date: Wed, 18 Feb 2026 17:33:00 +0100
Subject: [PATCH] [POSTFIX] first progress (1)

---
 setup | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/setup b/setup
index 8b9e4cc..df43299 100755
--- a/setup
+++ b/setup
@@ -87,7 +87,14 @@ write_env_file() {
   fi
   netbios_name="$sanitized_netbios_name"
 
-  service_password="$(tr -dc 'A-Za-z0-9@#%+=:_-' </dev/urandom | head -c 48)"
+  service_password="$(python3 - <<'PY'
+import secrets
+import string
+
+alphabet = string.ascii_letters + string.digits + '@#%+=:_-'
+print(''.join(secrets.choice(alphabet) for _ in range(48)))
+PY
+)"
 
   BOOTSTRAP_ENV_FILE="$(mktemp)"
   chmod 600 "$BOOTSTRAP_ENV_FILE"