---
- name: Deploys root password hash
  ansible.builtin.replace:
    path: /etc/shadow
    regexp: "^root:[^:]*:"
    replace: "root:{{ root.passwd_hash }}:"