diff --git a/containers/shower/default.nix b/containers/shower/default.nix
index 242d873..4f807ed 100644
--- a/containers/shower/default.nix
+++ b/containers/shower/default.nix
@@ -148,7 +148,7 @@ let
     outputHashAlgo = "sha256";
     # Pinned dep closure — reproducible until version bumps. To recompute,
     # set to pkgs.lib.fakeHash and read the failure.
-    outputHash = pkgs.lib.fakeHash;
+    outputHash = "sha256-HTTmAldIijG03pYZNyO72LBNPCrjmyJQKgW+gU9NplI=";
 
     dontFixup = true;
   };
diff --git a/docs/changelog.d/+shower-1.1.1-fod-pin.infra.md b/docs/changelog.d/+shower-1.1.1-fod-pin.infra.md
new file mode 100644
index 0000000..a19b578
--- /dev/null
+++ b/docs/changelog.d/+shower-1.1.1-fod-pin.infra.md
@@ -0,0 +1 @@
+Pin shower v1.1.1 FOD outputHash (probed locally on ringtail).