infra(webhook): docker-compose.yml

deploy/hooks.json

@@ -1,17 +1,31 @@
 [
   {
     "id": "bruchtal-deploy",
-    "execute-command": "/docker/deploy/deploy-bruchtal.sh",
+    "execute-command": "/docker/Bruchtal/deploy/deploy-bruchtal.sh",
     "command-working-directory": "/docker/Bruchtal",
     "trigger-rule": {
-      "match": {
-        "type": "payload-hmac-sha256",
-        "secret": "!!Zazen17-Doshin17**12345",
-        "parameter": {
-          "source": "header",
-          "name": "X-Gitea-Signature"
+      "and": [
+        {
+          "match": {
+            "type": "payload-hmac-sha256",
+            "secret": "!!Zazen17**",
+            "parameter": {
+              "source": "header",
+              "name": "X-Gitea-Signature"
+            }
+          }
+        },
+        {
+          "match": {
+            "type": "value",
+            "parameter": {
+              "source": "payload",
+              "name": "ref"
+            },
+            "value": "refs/heads/main"
+          }
         }
-      }
+      ]
     }
   }
 ]

docker/bruchtal-webhook/docker-compose.yml

@@ -0,0 +1,12 @@
+version: "3.8"
+services:
+  bruchtal-webhook:
+    image: webhook:2.8.1
+    container_name: bruchtal-webhook
+    restart: unless-stopped
+    ports:
+      - "9001:9001"
+    volumes:
+      - /docker/Bruchtal/deploy/hooks.json:/hooks/hooks.json:ro
+      - /docker/Bruchtal:/docker/Bruchtal:rw
+    command: ["-hooks", "/hooks/hooks.json", "-verbose", "-port", "9001", "-ip", "0.0.0.0"]