dtoro
493ae50f37
Created via the Gitea API (POST /repos/dtoro/Homelab-Docs/hooks) rather than the UI, since the existing PAT turned out to have sufficient scope. Webhook id 14: http://192.168.8.205:9831/deploy, push events, main branch filter, active. The shared secret was generated and registered with Gitea before the apps-side bootstrap ran (order reversed from the usual install.sh-first flow, since direct SSH deploy to apps is still pending operator execution — see oikos/console/deploy/README.md). Stored as secrets/oikos-console-deploy-secret.yaml (SOPS, recipient: apps only) rather than left as a local plaintext file, with explicit operator sign-off. When the apps-side install runs, skip webhook/install.sh's random-secret generation and write this exact value into /etc/oikos-console-deploy/secret instead. infrastructure/auto-deploy.md updated with the real webhook id (was "not yet registered"). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
17 lines
1.1 KiB
YAML
17 lines
1.1 KiB
YAML
webhook_secret: ENC[AES256_GCM,data:xo9I443vTtLvQesuyEOmfduLbljaVSQeWf6B7d9Vjp6HoP92BJiogsrPXQ==,iv:HI6Q7OzS0dNjJVXfmxNbetjxOE5nAWQoaXSki0fiItE=,tag:bfnR5RmVmVd0ahRXIRV1yg==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHdzl3Z0dwU09aWjVBcHcx
|
|
ZE4rWHJ0aXhueXZmZ2NhSWlSaHdzUnRYR3hZClRVZVY4WDBTOHFnM251L2M5R1dp
|
|
T0ZQWmQrK09Uck5laksrVTZuckRqVU0KLS0tIGxKZ2ZUa09jdklWT2JPWW1KTVZr
|
|
cGFiZHk3YWtxLzFCS011cHpjdE1JTXMKCJXHZn7akExja+Xy9SeHjFoc1h/ctuQP
|
|
s1CUPsnZXPwOkxWSyqx+YEeilxwWlGgmWT4EZXAz/JcSRPyq8u+flg==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
|
|
lastmodified: "2026-07-06T11:14:22Z"
|
|
mac: ENC[AES256_GCM,data:J4KRkno5xwfs1za0PqGR7MKSuve9tTv5zBIb02nvD+pXTBuW5CzhnQM4YPTtq8NhSngEGJbVA0o5iK5aG3ezXFyG/m3JzACooN/3XHh3zvEvm/ZuubiV+mVhJYNv/+3/nK+jCeIJNrpmw8opAEE2+sy2cKryNUV1jRlw1GGFE2k=,iv:7PDWchlXYpDde3WsBiZ7UbO+XtMfeqPQO6JDf+/QXLU=,tag:HhfSVbDqtU31I5qLG/dMMQ==,type:str]
|
|
unencrypted_suffix: _unencrypted
|
|
version: 3.13.1
|