feat: laptop change and smartphone add to authorized MACs

meta/dns.nix

@@ -131,8 +131,9 @@ let
         ];
 
         web02.dual = [
-          "cas-eleves"
-          "vote"
+          "cas-eleves" # CAS server
+          "chat" # Mattermost
+          "vote" # Kadenios
         ];
 
         web03.dual = [

patches/default.nix

@@ -33,6 +33,26 @@ in
       _type = "static";
       path = ./04-crabfit-karla.patch;
     }
+
+    # nixos/kanidm: add basic provisioning
+    {
+      id = 251598;
+      excludes = [ "pkgs/by-name/ka/kanidm/package.nix" ];
+      hash = "sha256-z4b1ljwapfj4KpXEEAMmhYKogstKtURyq+hoJcfEXiw=";
+    }
+
+    # kanidm-provision: 1.1.1 -> 1.1.2
+    {
+      id = 336836;
+      hash = "sha256-4ihpxYdLp559RIcKRC6GPt5flLCohFiPGp0k9h1s1hs=";
+    }
+
+    # nixos/kanidm: fix systemd service type
+    {
+      id = 337527;
+      excludes = [ ".git-blame-ignore-revs" ];
+      hash = "sha256-ca7CsPuWJqucC77ejsvoDAt+wxWLUP30IdXtZQVQrko=";
+    }
   ];
 
   "nixos-unstable" = [