caddy-conf

dtoro/caddy-conf

Fork 0

Commit Graph

Author	SHA1	Message	Date
Claudio	c2a1ab464b	Webhook service: allow writes to /etc/caddy git pull inside the deploy needs to update .git/FETCH_HEAD, but ProtectSystem=full makes /etc read-only. ReadWritePaths=/etc/caddy opens just the repo directory.	2026-04-20 17:11:39 +02:00
Claudio	b6dec2a894	Add deploy.sh + webhook receiver deploy.sh runs on LXC 121: git pull, caddy validate, systemctl reload. webhook.py is a small HTTP receiver on :9797/deploy that verifies the gitea HMAC-SHA256 signature and triggers deploy.sh. install.sh provisions /etc/caddy-deploy/secret and the systemd unit.	2026-04-20 17:10:15 +02:00

Author

SHA1

Message

Date

Claudio

c2a1ab464b

Webhook service: allow writes to /etc/caddy

git pull inside the deploy needs to update .git/FETCH_HEAD, but
ProtectSystem=full makes /etc read-only. ReadWritePaths=/etc/caddy
opens just the repo directory.

2026-04-20 17:11:39 +02:00

Claudio

b6dec2a894

Add deploy.sh + webhook receiver

deploy.sh runs on LXC 121: git pull, caddy validate, systemctl reload.
webhook.py is a small HTTP receiver on :9797/deploy that verifies the
gitea HMAC-SHA256 signature and triggers deploy.sh.
install.sh provisions /etc/caddy-deploy/secret and the systemd unit.

2026-04-20 17:10:15 +02:00

2 Commits