Add show_diff parameter to postfix::conffile

[treydock]

No description provided.

[anarcat]

why would you want to disable this? this would be easier to accept if it didn't change the default (which is true)

[treydock]

I changed default to true. This is useful if a site decides to define a file with a password and globally enables show_diff in configs for reports. Our reports go out via email so have to take care to ensure diffs don't contain passwords.

    postfix::conffile { 'ldap-aliases.cf':
      options   => {
        'server_host'      => $ldap_server_host,
        'search_base'      => $ldap_base,
        'query_filter'     => '(uid=%s)',
        'result_attribute' => 'mail',
        'version'          => '3',
        'bind'             => 'yes',
        'bind_dn'          => $ldap_bind_dn,
        'bind_pw'          => $ldap_bind_pw,
      },
      show_diff => false,
    }