webhook

docker-compose.yml

@@ -61,5 +61,25 @@ services:
     depends_on:
       - app
 
+  # Webhook deploy (GitHub push -> git pull + rebuild). Dengar 127.0.0.1:9001;
+  # host nginx reverse-proxy /hooks/ ke sini. WEBHOOK_SECRET dari .env.docker.
+  webhook:
+    build:
+      context: ./docker/webhook
+    image: taklimatspr-webhook:latest
+    restart: unless-stopped
+    env_file:
+      - .env.docker
+    ports:
+      - "127.0.0.1:9001:9000"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./docker/webhook/hooks.json:/etc/webhook/hooks.json:ro
+      - ./deploy.sh:/deploy.sh:ro
+      - .:/srv/spr2026_taklimat
+      # Kunci SSH host utk `git pull` repo peribadi (abaikan jika repo awam/HTTPS).
+      - /root/.ssh:/root/.ssh:ro
+    command: -hooks=/etc/webhook/hooks.json -hotreload -verbose
+
 volumes:
   app_storage: