From 9d4717eb450e8ece81cc7dd909472200c2f422c5 Mon Sep 17 00:00:00 2001 From: Saufi Date: Tue, 16 Jun 2026 17:09:17 +0800 Subject: [PATCH] webhook --- deploy/README.md | 11 +++++++---- deploy/hooks.json | 2 +- deploy/myansuran-webhook.service | 2 +- 3 files changed, 9 insertions(+), 6 deletions(-) diff --git a/deploy/README.md b/deploy/README.md index d28e6b6..8bc9adb 100644 --- a/deploy/README.md +++ b/deploy/README.md @@ -3,7 +3,10 @@ Bila ada `git push` ke Gitea, Gitea hantar webhook ke server. Server tarik kod terbaru dan jalankan `docker compose up --build -d` secara automatik. -Aliran: **push → Gitea webhook → `webhook` listener (port 9000) → `deploy.sh`** +Aliran: **push → Gitea webhook → `webhook` listener (port 9001) → `deploy.sh`** + +> Nota: port **9001** digunakan (bukan 9000 default) kerana server ini sudah +> ada satu lagi app guna webhook di port 9001. Pastikan tiada port bertindih. --- @@ -38,7 +41,7 @@ sudo systemctl status myansuran-webhook Repo → **Settings → Webhooks → Add Webhook → Gitea**: -- **Target URL:** `http://SERVER_IP:9000/hooks/myansuran-deploy` +- **Target URL:** `http://SERVER_IP:9001/hooks/myansuran-deploy` - **HTTP Method:** `POST` - **Content Type:** `application/json` - **Secret:** secret SAMA seperti dalam `hooks.json` @@ -61,8 +64,8 @@ sudo journalctl -u myansuran-webhook -f ## Nota keselamatan -- Port `9000` hanya perlu dicapai oleh Gitea. Hadkan dengan firewall: - `sudo ufw allow from to any port 9000 proto tcp` +- Port `9001` hanya perlu dicapai oleh Gitea. Hadkan dengan firewall: + `sudo ufw allow from to any port 9001 proto tcp` - Atau letak di belakang Nginx/Apache reverse proxy dengan HTTPS. - Signature HMAC-SHA256 menghalang sesiapa tanpa secret daripada trigger deploy. diff --git a/deploy/hooks.json b/deploy/hooks.json index fdd2253..d5df5ae 100644 --- a/deploy/hooks.json +++ b/deploy/hooks.json @@ -17,7 +17,7 @@ { "match": { "type": "value", - "value": "refs/heads/main", + "value": "refs/heads/master", "parameter": { "source": "payload", "name": "ref" } } } diff --git a/deploy/myansuran-webhook.service b/deploy/myansuran-webhook.service index aabbb75..cb84a96 100644 --- a/deploy/myansuran-webhook.service +++ b/deploy/myansuran-webhook.service @@ -7,7 +7,7 @@ Requires=docker.service # User mesti ahli group 'docker' supaya boleh jalankan docker compose tanpa sudo. User=deploy WorkingDirectory=/opt/myansuran -ExecStart=/usr/bin/webhook -hooks /opt/myansuran/deploy/hooks.json -port 9000 -verbose -hotreload +ExecStart=/usr/bin/webhook -hooks /opt/myansuran/deploy/hooks.json -port 9001 -verbose -hotreload Restart=always RestartSec=5