While creating a new server or a new site with system user, Ploi sends out by email the passwords in clear text, and that's quite a bad security issue especially that you are sending out the sudo user and server address.

More than this, these passwords cannot be changed from the dashboard so whoever gets access to the email, they will have full access to the server.

In order to mitigate this issue I suggest to have a way through the ploi dashboard to show/edit the password after entering again the account password.

Please please please don't send passwords in clear by email.

Frankly speaking, I'm new to ploi and because of this way of dealing with server passwords I'm now thinking of finding a different solution for server management.