tambah trust proxy

docker-compose.yml

@@ -21,6 +21,24 @@ services:
     networks:
       - backend_net
 
+  # ── Webhook Deploy (Gitea → auto pull + migrate) ───────────────────────────
+  webhook:
+    build:
+      context: ./docker/webhook
+    container_name: myansuran-webhook
+    restart: always
+    environment:
+      WEBHOOK_SECRET: ${WEBHOOK_SECRET}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /root/.ssh:/root/.ssh:ro
+      - ./docker/webhook/hooks.json:/etc/webhook/hooks.json:ro
+      - ./deploy.sh:/deploy.sh:ro
+      - .:/srv/myansuran
+    command: -hooks=/etc/webhook/hooks.json -template -verbose
+    networks:
+      - backend_net
+
 networks:
   backend_net:
     name: backend_net