feat(web03): Prepare the migration by setting up the sympa credentials

machines/nixos/web03/django-apps/gestiobds.nix

@@ -7,7 +7,7 @@
 {
   services.django-apps.sites.gestiobds = {
     source = "https://git.dgnum.eu/DGNum/gestioCOF";
-    branch = "django-apps";
+    branch = "bds-prod";
     domain = "gestiobds.webapps.dgnum.eu";
 
     nginx = {
@@ -46,6 +46,8 @@
 
     credentials = {
       SECRET_KEY = config.age.secrets."dj_gestiobds-secret_key_file".path;
+      SYMPA_PASSWORD = config.age.secrets."dj_gestiobds-sympa_password_file".path;
+      SYMPA_USERNAME = config.age.secrets."dj_gestiobds-sympa_username_file".path;
     };
   };
 }

machines/nixos/web03/django-apps/gestiocof.nix

@@ -98,6 +98,8 @@ in
       HCAPTCHA_SECRET = config.age.secrets."dj_gestiocof-hcaptcha_secret_file".path;
       HCAPTCHA_SITEKEY = config.age.secrets."dj_gestiocof-hcaptcha_sitekey_file".path;
       KFETOPEN_TOKEN = config.age.secrets."dj_gestiocof-kfetopen_token_file".path;
+      SYMPA_PASSWORD = config.age.secrets."dj_gestiobds-sympa_password_file".path;
+      SYMPA_USERNAME = config.age.secrets."dj_gestiobds-sympa_username_file".path;
     };
 
     environment = {

machines/nixos/web03/secrets/dj_gestiobds-sympa_password_file

@@ -0,0 +1,28 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA nCqPd6cfKuFqUsUoLiCAgPBuJt2Hxf84l3S8sFFP3HU
+4B5OzTl0E1qDhNCrWoSQrblfwP9t+7jLwmfyD85bU+Q
+-> ssh-ed25519 QlRB9Q lekG6iJKryhQyHhBL8edvYe5qUOD8fsHNy+U1GnaAAM
+7huSwMZh/oYgz6eAt0AGnHx+zNqC7OqPVxoI4Io1QK0
+-> ssh-ed25519 r+nK/Q hFWDEeZ/wjozS/uMQ7nOLvKb3CZtHSi7V5h5vF1nukU
+bIZ6RxlTdhoe6nGHxoUIgb9zTWFSwfDUtzBTCyl5DIc
+-> ssh-rsa krWCLQ
+x9f4KN63jMhV2b4poEfjO+GdhVdkQOkrFr+HORykjS4QN95fKVc1wYfclmpy0UzL
+8yj6468TRPkVScNOx39JN8aRPnpxDJZgY55Pm0XEbm1r6TL4c+rUbNLZiXBCnTIf
+UHSdihye+mQCNehPOnPW1bBm14/XlcX8B+jTtAhZnBrevGkrtCfekRa1RptB/Jnx
++UdUxdLnfn1DXNabQ88mAvDEFuTGJERbYiOo5hcbKfJzN0EtHEE4AlWBOCUwz6JI
+2LDp4FsxRJbhMVXlO96XESg34qZ6HHiKDP5tYvszymBKCfJtatfyCkFW7duX8JnK
+PtHRpQas1yPkC+uRewEAZQ
+-> ssh-ed25519 /vwQcQ h0kXdGeuILfc9GQ0ROcnHafqxhR+mgWxGI6GGNtzHSo
+SCIMALEJSNJAchdccKKQY1Z8G8UgM9RTXGuuOiPBcqU
+-> ssh-ed25519 0R97PA o5vRek9FC6XTKlekJjQUw7ji9b6Nu3rFj01i+zLfM0I
+J5vIR+Y9XQMkG4J3s+LFBikdPdTlTrZJ3io4oBaxpT8
+-> ssh-ed25519 JGx7Ng irwEdzwW+AY7xg5PFHlzfgCfwf+rniYj92ObZosJxTE
+0zWUJUk2xnTvRTtBwSnStvPpyHcWSyrcgKRkS8/Wg/M
+-> ssh-ed25519 bUjjig JMjosQd1PasEIZUbX60rY95AqpPHRYQ2+YG8QshVNEg
+1qpBLuIUzao9KgtOJzb5MiRK3y9re8k/ZiKQVTebgZU
+-> ssh-ed25519 VQSaNw z2/xAsQSk4CJZspoPvDaY2Jt0D1uD7IJ/dgUW5b8l20
+d3HBFKwfBHFv5a8ZDOgnHbMH4utlk5NoCoRdyooFfz8
+-> Jgvp-grease < 'AU bc;'6N ][oUH4#l
+L4IrbUztdsvZUAeQh7GM6qxwywCgAO2GzYF3kS3416TnpRARJfhwcT7L
+--- gpwdahh3CX/RVausIcNZFnCSOAD3CB4m4uqtf5FY9qs
+<EFBFBD>òéYžÂpñÒŒ†®úî_/ÐGëJJÊbj‚•H±ûïMý<J>	‹ÃóNLêy˜PU~ôVpáH$ÐjÒº

machines/nixos/web03/secrets/dj_gestiobds-sympa_username_file

@@ -0,0 +1,28 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA 1sin1+7rRTxNHtJZcKabCjoOU0YfBiAJqi2kvY3BlkU
+YfIeM5b3dAQ9d7EzOzncNKSl5fMupNMwrB/IcwToREs
+-> ssh-ed25519 QlRB9Q ZxQUPfdo72dsQGxeM+x+s1zDijaO0sbbIjWaCC+VSSs
+HQEDQIm1V9XrbR+lSrk0g9snE8FHyXLutU686MYt+yc
+-> ssh-ed25519 r+nK/Q R9F6qGCrR6ytSzHB9sh6t96FTfcLEEiecA2osmY0wyk
+jxPFGAzRb4uZ3b6B5bWXntEDbe2JOr00c1vF/IQI5LE
+-> ssh-rsa krWCLQ
+KRmb1/IpTys1spfn2sgZx2TPw07qOW3sjdA0oM8k5hv7wPmLbsUOv9uIuLFIbZ1r
+nLJ/Dx8Ld5rW9TDQs9t6DbhR/xlPepYiv7U52PER3mhg1p7iuhrPJ6EwS0KOHRLy
+zI8FG01oA1SP2tSlPBai7UZNyzZ2okmoUoxu6jQK7mtBcXdLR2skiheinKHlq/wl
+rpMtpew6KgVJAEayyNeIcDnp5WEjtVcNKnniCcP3h9V5n77lm2AzXq/WJnJpBu8c
+wXLYkRjWypU5AplYTpwtxsqJERsS0mUb2XvU0k1YLz2kCOKAXrpYyVBC4lbFLpO0
+MQjmWiHkhDa1MXU4aQgJvw
+-> ssh-ed25519 /vwQcQ 2HiN86X7ZXYWXnazVTwIQkpt/ZDbtiKsRrF5z3YqXik
+EkN2GGF3yLhEg4AJ4BLbg10MRLwgouupPT1+etPofXg
+-> ssh-ed25519 0R97PA v5XSD+W+rhe8EnUSnmD8WrgU1g9QNjQPyjTHn5UApX4
+7NkCuZSsFuAgRw/4wn2tbUZeJa4NYd56vVeBk93gpsQ
+-> ssh-ed25519 JGx7Ng CwZFH3ebpUl88dzzZmddH7qdz3FN9HcKBk0Zs9AsBCw
+G4+Gtj99hFC0KkG0LG4X4R/rHMNjSpZpq+LLF7Bfsrk
+-> ssh-ed25519 bUjjig OcB6mzPc7dW6CjZ2NNsS4V+cMuEaZkenwZr4hPr/hk8
+U3+oAftt3xZvgwCI1LJJGIpDEhh5oHBhZ8oNbfxkkrI
+-> ssh-ed25519 VQSaNw +huOn0zIxqVGRF6BiBMLX+GSwfKRkd94A1RmAKiOBAg
+Sx/lHGANxHvrrWO2rVmAhDBR7JlkTai7yebIVB/aUrQ
+-> 8TlZ1zJ-grease WZg[
+jSsrK4vKjW3OCBxgFCU
+--- /6TA3mHmrjQNkG3Di4XDUH6eCC5cbwaS8v0/81pxwm8
+ù„ÑVž…þX&˜‚÷Ô¤<C394>ü|ñÁ]0ê‡Ï$b)ò?ÉóŠyÕ

machines/nixos/web03/secrets/dj_gestiocof-sympa_password_file

@@ -0,0 +1,28 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA +BQa+ugqdPjEBvYYb8Df6KQdZDV/TJCkyiWOJWHIjWc
+ziO4pJ0aQXqsb+K6SXdRSraD1ep77KA5zlsTqagfEYU
+-> ssh-ed25519 QlRB9Q yv/FQjy7w1Fu94QCS22gkscscOwL2oPvDjyR5X9Igz4
+X9RC9KBrUX7yW5RiMZy1XT1Xf5QvDE6NgbULRIO7M8o
+-> ssh-ed25519 r+nK/Q TS4qVU6OePZ6oVN7094eOOo5jnxRK2dmExK1VubkWVE
+6iQmmQKPFHJnY9CHD1siBlh8lUOdpSl6y1rvTmIHS3c
+-> ssh-rsa krWCLQ
+ySviPzr0CLb9Bp1UwadeHxFCnLjDYXeJtzXY8Bv10POO4jPHaayb37XSTDdMvCNw
+1TQcB6TwO7KYYC6L+YNAs9OGM2zL6PoY8mLwAFC61GpLsYX5QoP/5oWsPzBP/+ZS
+oRb0eWNM70dOXIPr0xbnt3GMVOH90Br68ilUHt0abDcRj8s/ZlSRpG+wUXFtBhHu
+teXXoVilAZe96XOcuGIzgytqLmQWSJfP6pn99MVMxChd12h2oLFAJIvHQdPwYakd
+0+dw0SRHBu1URbO57iVahNR2OZ6RCIUZud7otd+O7ezVc5Pw5+UvPaube4RFuPfR
+k/mDmLFS4u6AooIsLxP9XQ
+-> ssh-ed25519 /vwQcQ kWesGLZOgczOGl6C+pZkSYuJO3mg18ZTUbTRDM7elW4
+MTQNeWMICNbQM4bbCI4r4p6j5oIuQ51IZNNU0EqYPr4
+-> ssh-ed25519 0R97PA MhKBOsF1nxbP4/ORa22CXD9vL2OOnq6Y6tBtNCnyjws
+Yg3pCxNXeVJH2BBBr5bO35vpqGCZqsrppdRF6pd0rUs
+-> ssh-ed25519 JGx7Ng +33STTQ9GUoyjoeJ2+k5ORE6aDhs8XPLpPk+EgkTzyA
+5QmyIw4cK2Enhuj+jQKwBf+ZZPVlgvJtiQa8W8w9SWE
+-> ssh-ed25519 bUjjig mFLUapEr3AmrrCQhn1QQQHqosf4OsYw+ZE5UrklBHWA
+BprTbbxTKoX6EXHU07MauXxEwDYEuJsHpYUosnC7JlM
+-> ssh-ed25519 VQSaNw QNW0XT4JUynOh6DT4CsM/SBOamE5C4Z+3yvZB6aQPks
+HZ+0DagnsnVExKH2ejFIssuulRK+b1KofEi8XuwFx6A
+-> JRgb1uy-grease US DT`O
+GG1BdA0Elad+GvM5jnce
+--- QW+vxg1uWJUvrrGgS2YIQ+SQqG7Z6mtxL6V/OtGRO0A
+íjδª.&æo×ö
rÜñw1Óféocò€®m9lÕ(µØjQÔÐù–Ó=dvM8O0zª[d
æ.v!Å}

machines/nixos/web03/secrets/dj_gestiocof-sympa_username_file

@@ -0,0 +1,28 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA G08J7+NgWQGZVkIde7zJstb7OzUfPT/BoD8o5ehr52U
+j/ElDsKhzSlBm/38mqKjGGaWE1JH9LPIIcKGH+tyoV0
+-> ssh-ed25519 QlRB9Q oiwCOK+dRZl7P9bN6pyj7oP6GdSGrAb59qRkXYRZUik
+zsmVLTV1q+Y5JEBqe2GvvC8TmcpqmGq/iLL5XyfIV44
+-> ssh-ed25519 r+nK/Q X7R3UEsZ2QTrEIBKszCaSQcPtR79FwY1maSgSDCgRTw
+z11Lp7ZwRwSTl9xGmc9j85cx8POXPYayxD7sPJbQN38
+-> ssh-rsa krWCLQ
+i4QWkg/93xPSIMaSG9fBtDIn843hBVOsv7bBbYAeVrMgkaC1FshwOdmCNaKI39Ny
+C+x/ic2ehElvp4/qgyelQvbcJDvEJeb1651haExdXrlLbIwWETAsoxJWwV4P2peO
+PKkDvB7oRdyX0ekcB2tBAnSSL9tt7AxHri3mbCgIieD8ZA4gPbe2oAl96MbxNbA0
+IcaUwvX1Lmt+oi4dYdYpxe9zqQXR4qCOAUxVk0EvuvSyDkpYMf2JI1X/GMsfHOLd
+k7fpaDB7k37KibAfvGc1fkvZofR0Y4B9jAuuaPlOuqXi7L/GAvRGJHbTBIVaQllV
+I+d0TJNBhLQdrOuvaOWf5Q
+-> ssh-ed25519 /vwQcQ RpoAyxLyvx/h032Tkz//5y4ezCeAEEoQmBzwnChT/y4
+qgKi8DarlMmifEeul+HxgmwxyDJNYCf1HTdA54kaujY
+-> ssh-ed25519 0R97PA xoKpI4YDX/gdviuu6SsbKyEN0Vax3M0xMMoSiZYlYXc
+clH2T71Vj1h2r+NYni+nLVh5+fUF+Jc32sbK43WBeg8
+-> ssh-ed25519 JGx7Ng hPl2gUACWfq6bRXhI2mmDLaYKrm6Uwt2PmslLDQD9QE
+GtiTSqsIf6g8tjyr/humabIXgJNGA4eRZqbe3lTtDuM
+-> ssh-ed25519 bUjjig Zxs3hOPgnRndY14SUitR7GOB7kN6U0rWxcABOAkJFTE
++nlVgYVvKb3TtvRLHNcJovugtX3ePgJhVQtxPgzaMsU
+-> ssh-ed25519 VQSaNw sNN+thHhKog98Sqxj2q3V5ue/WjfcMaQLHgYuUCp0Wg
+zUemwjJczCunsQKzze2De1x1bnH1/IGvFAU+3YTN3kk
+-> F~aB-grease YS )Ur CV
+2iTJvv/WFAXVQVpVDkFFQDdPEMoymZSenn46NWDGp6/xr87k+g
+--- oeW+udUp0ualTjLhEvk4C5w5mDDmiMIkp9GPsnNL1no
+xfý=ê…'»æôy<0E>á`±€š:èª@lˆN‹Ûf"éRÖå

machines/nixos/web03/secrets/secrets.nix

@@ -13,7 +13,11 @@
     "dj_ernestophone-password_file"
     "dj_ernestophone-admins_file"
     "dj_gestiobds-secret_key_file"
+    "dj_gestiobds-sympa_password_file"
+    "dj_gestiobds-sympa_username_file"
     "dj_gestiocof-secret_key_file"
+    "dj_gestiocof-sympa_password_file"
+    "dj_gestiocof-sympa_username_file"
     "dj_gestiocof-hcaptcha_secret_file"
     "dj_gestiocof-hcaptcha_sitekey_file"
     "dj_gestiocof-kfetopen_token_file"