tambah webhook

docker-compose.prod.yml

@@ -62,6 +62,22 @@ services:
       APP_ENV: production
     extra_hosts: []
 
+  # ── Webhook Deploy (GitHub → auto pull + migrate) ──────────────────────────
+  webhook:
+    build:
+      context: ./docker/webhook
+    container_name: ecert_webhook
+    restart: always
+    environment:
+      WEBHOOK_SECRET: ${WEBHOOK_SECRET}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /root/.ssh:/root/.ssh:ro
+      - ./docker/webhook/hooks.json:/etc/webhook/hooks.json:ro
+      - ./deploy.sh:/deploy.sh:ro
+      - .:/srv/ecert
+    command: -hooks=/etc/webhook/hooks.json -template -verbose
+
 ###############################################################################
 volumes:
   storage_data: