From ded867d274f532b383a414e3f349230509f2a0ab Mon Sep 17 00:00:00 2001
From: Tom Hubrecht <tom.hubrecht@dgnum.eu>
Date: Mon, 18 Nov 2024 13:02:54 +0100
Subject: [PATCH] feat(dj-interludes): Add a real secret

---
 machines/web03/django-apps/interludes.nix       |   3 ++-
 machines/web03/secrets/secrets.nix              |   1 +
 machines/web03/secrets/webhook-interludes_token | Bin 0 -> 1428 bytes
 3 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 machines/web03/secrets/webhook-interludes_token

diff --git a/machines/web03/django-apps/interludes.nix b/machines/web03/django-apps/interludes.nix
index f7a52aa..c08d7bb 100644
--- a/machines/web03/django-apps/interludes.nix
+++ b/machines/web03/django-apps/interludes.nix
@@ -10,6 +10,7 @@ let
 in
 
 {
+  services.webhook.extraArgs = [ "-debug" ];
   services.django-apps.sites.interludes = {
     source = "https://git.eleves.ens.fr/dlesbre/site-interludes";
     branch = "master";
@@ -22,7 +23,7 @@ in
       serverAliases = [ "interludes.webapps.dgnum.eu" ];
     };
 
-    webHookSecret = builtins.toFile "insecure-secret" "T5hNeDraMivRZLUkrekv&QeM";
+    webHookSecret = config.age.secrets."webhook-interludes_token".path;
 
     application = {
       type = "wsgi";
diff --git a/machines/web03/secrets/secrets.nix b/machines/web03/secrets/secrets.nix
index b79c3b0..77b8726 100644
--- a/machines/web03/secrets/secrets.nix
+++ b/machines/web03/secrets/secrets.nix
@@ -2,4 +2,5 @@
   # List of secrets for web03
   "dj_interludes-email_host_password_file"
   "dj_interludes-secret_key_file"
+  "webhook-interludes_token"
 ]
diff --git a/machines/web03/secrets/webhook-interludes_token b/machines/web03/secrets/webhook-interludes_token
new file mode 100644
index 0000000000000000000000000000000000000000..571a9adf412cb60cfb932d287b5fb4f1d914ca52
GIT binary patch
literal 1428
zcmZA0xvt}M7zJ=7I#0zL1W}>r;w5%$OAN^I9y_-G-jf1kJ6_{0UK1CHeyY(_6jLw-
z6%{?@6m+}+5^umFfkeYlT#74w{ZHrUd_fvN#C6o&+aYi2Pns@;Clq@4Y}NPKLwv>v
z0;N}l>?a1Zl5bH)E^&+X+nKGWfIw7w;gTg|)_BKTYE*Nxylqd6;6Rs+Uh3seP<Mu8
zl#G3)Z=UZq<o;+h5oVEjI~M7st<)NMs)5qn(O_j7bgJY-rJ|$lsWK^5V*&37>U<z}
ztvC70z1h@uEJ{uU4UBxHo6S8ot2kDa<=EBx(QM`3uJ_VRIs=Lhor_o%b$qII>so=q
z$`3nQ=~^>ymch~TRuH8_-OjF$Yk*pNl<dTcL57=A#G#blhC>i~T3^W1xQ~EF!W(tV
zsdH9pn&S&X<Fa#^t7!A6b$zh9bRMe$=#KkROka?>4#FVtsxgWTlisB~7zb9FB)z>Y
z(nRcxIq0|6fT5uUhmoOJjCSCS#Dc`h_xmdzj+Io(t*?X}*_KJ7TVkdrmB5|sXfjw*
z-&_w~LpZ!DgXkJ5Q|ulPcrjsUe{N*qLX){CFQUzIOCC-7DTW6Dbrj@S&VGGvZ>g%2
zTepHK*QqFGHl^qg_=`@_SLk$X5HwDD-HhNXIG!TzRML?Rx=sxwR43kDBqt+H>-?^a
z>bCYUm`DtqJM2L!??lKh*H)_;CzJ#<x;}$ls}E+FAf&@ec?_C8<##rUck(T}Ye6Eo
zuwAXOmfCI#;O?D0#PLKD>AnRzi8HbqCUr}3=Et@lcMDH5h`_3))@b4y8#-jqc^2Pi
z{ZvY5OT#lduglnuB5m!DKBl-hWYK}Wv&cITu6&W%glCx-d>puOJ9*=tuNa4G0ai-9
z!9UdylP2GN2^yGP;)xiuV4N(mM$Ae`ELc_`Pflyp*fh&^h@M+qI6z5mA1Z|;_U*{m
z;!UI&Lru-CgBvxu&e_1p22b^vlM~5LwY_*FwR9C$@&JgTSY{aUuLa9*?k8Y-h{Ms`
zWv_c@4K{=-JHQ}<$fcdO2})T*6^K0P>itn@#Pq7&fE+5N2T&%<>iURn|KIInlc7@-
zdAi!bn^GV690rVj*zNd0TpKK&=EmXPsB=O`d0!|Ak_vVTnU}><K~+=vDQd42Q=Inv
zabbDZ0`P1WEr}Rw<z3xT2A*bfffZ=;imz}@599*rJl&sghwFWw=u>i=pVunVyEfY`
z#1Xb=B!#+cni^hh`(>y5C9=bZnYvMBWk*gH9&4!qQ8njyeH-!rG|TTl{jhyVyEy3M
zl@jA$eKbQD4aClr^q##WWNsb1TZY|J=;7gERVn9iD)>=da<EuEf%ZLfs!8}nsi_1n
zY-l^(?8bEyGti6QKmQp9$uI9~e|`MZOZB%8$S>a{*w^2G+x=s_`sRyYg*Wv5&%a;2
e{_gD$tovg9<4Y4fJbU{G_IzOQ_ny6e@A<!cAJakr

literal 0
HcmV?d00001