tambah webhook

docker/nginx/default.conf

@@ -62,6 +62,13 @@ server {
         try_files  $uri =404;
     }
 
+    # ── GitHub Webhook Deploy ─────────────────────────────────────────────────
+    location /hooks/ {
+        proxy_pass         http://ecert_webhook:9000/hooks/;
+        proxy_set_header   Host $host;
+        proxy_read_timeout 60s;
+    }
+
     # ── Halang akses fail tersembunyi ─────────────────────────────────────────
     location ~ /\. {
         deny all;

docker/webhook/Dockerfile

@@ -0,0 +1,6 @@
+FROM alpine:3.21
+RUN apk add --no-cache git docker-cli curl && \
+    curl -fsSL https://github.com/adnanh/webhook/releases/download/2.8.1/webhook-linux-amd64.tar.gz \
+    | tar xz -C /usr/local/bin --strip-components=1
+EXPOSE 9000
+ENTRYPOINT ["/usr/local/bin/webhook"]

docker/webhook/hooks.json

@@ -0,0 +1,18 @@
+[
+  {
+    "id": "deploy",
+    "execute-command": "/deploy.sh",
+    "command-working-directory": "/srv/ecert",
+    "response-message": "Deploy dimulakan.",
+    "trigger-rule": {
+      "match": {
+        "type": "payload-hmac-sha256",
+        "secret": "{{ .Env.WEBHOOK_SECRET }}",
+        "parameter": {
+          "source": "header",
+          "name": "X-Hub-Signature-256"
+        }
+      }
+    }
+  }
+]