Set up Keycloak to Mailman sync for chaos@

DRY_RUN=true, so no changes to Mailman are performed yet.

resources/chaosknoten/lists/docker_compose/compose.yaml.j2

@@ -68,6 +68,22 @@ services:
     networks:
       mailman:
 
+  keycloaksync:
+    restart: unless-stopped
+    command: ["uv", "run", "main.py", "sync"]
+    environment:
+      - DRY_RUN=true
+      - KEYCLOAK_CLIENT_ID=mailman-sync
+      - KEYCLOAK_CLIENT_SECRET={{ secret__lists__keycloak_client_secret }}
+      - KEYCLOAK_REALM=ccchh
+      - KEYCLOAK_URL=https://id.hamburg.ccc.de
+      - LIST_ATTRIBUTES=chaos@lists.hamburg.ccc.de:mailinglist-chaos
+      - MAILMAN_API_PASSWORD={{ secret__lists__rest_password }}
+      - MAILMAN_API_URL=http://mailman-core:8001/3.1
+    image: git.hamburg.ccc.de/ccchh/mailman-subscription-sync:latest
+    networks:
+      mailman:
+
 networks:
   mailman:
     driver: bridge