diff --git a/machines/web03/django-apps/interludes.nix b/machines/web03/django-apps/interludes.nix
index f7a52aa..c08d7bb 100644
--- a/machines/web03/django-apps/interludes.nix
+++ b/machines/web03/django-apps/interludes.nix
@@ -10,6 +10,7 @@ let
 in
 
 {
+  services.webhook.extraArgs = [ "-debug" ];
   services.django-apps.sites.interludes = {
     source = "https://git.eleves.ens.fr/dlesbre/site-interludes";
     branch = "master";
@@ -22,7 +23,7 @@ in
       serverAliases = [ "interludes.webapps.dgnum.eu" ];
     };
 
-    webHookSecret = builtins.toFile "insecure-secret" "T5hNeDraMivRZLUkrekv&QeM";
+    webHookSecret = config.age.secrets."webhook-interludes_token".path;
 
     application = {
       type = "wsgi";
diff --git a/machines/web03/secrets/secrets.nix b/machines/web03/secrets/secrets.nix
index b79c3b0..77b8726 100644
--- a/machines/web03/secrets/secrets.nix
+++ b/machines/web03/secrets/secrets.nix
@@ -2,4 +2,5 @@
   # List of secrets for web03
   "dj_interludes-email_host_password_file"
   "dj_interludes-secret_key_file"
+  "webhook-interludes_token"
 ]
diff --git a/machines/web03/secrets/webhook-interludes_token b/machines/web03/secrets/webhook-interludes_token
new file mode 100644
index 0000000..571a9ad
Binary files /dev/null and b/machines/web03/secrets/webhook-interludes_token differ