Commit Graph
3 Commits
Author SHA1 Message Date
adminandClaude a93fe6f15e Add Authorization-header + /hook proxy to webhook/deploy
webhook.py: check_auth() requires Bearer token (WEBHOOK_AUTH_TOKEN),
  checked before HMAC signature. Returns 401 on missing auth.
Dockerfile: nginx proxies /hook -> host:41798, forwarding Authorization
  + X-Gitea-Signature headers. Host IP via HOST_IP env + host-gateway.
docker-compose.yml: extra_hosts host-gateway + HOST_IP env.
deploy-webhook.sh: generates .webhook.auth token, 'auth' subcommand.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-28 14:28:16 -07:00
adminandClaude 42291f61b8 Switch host port to 31415 (obscure; keep low ports free)
Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-28 14:13:04 -07:00
adminandClaude 7db45049dc Add docker-compose + deploy.sh (Coolify replacement)
Run on mewtwo: bound 0.0.0.0:8081 -> nginx :80.
Rebuilds site from source on every 'deploy.sh up' so new grades
flow through without Coolify. Point Netbird at http://<host>:8081.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-28 14:11:47 -07:00