TZGyn/tunnel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Note the per-app webhook secret gotcha

Browse Source
This commit is contained in:
TZGyn
2026-10-25 14:45:46 +08:00
parent 89a4a3991b
commit 7dc2eaab29
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AGENTS.md
+5
View File
@@ -56,6 +56,11 @@ what we take vs. skip). Never vendor it into the build.
so it matches fine. A curl replay needs `X-Gitea-Event: push` and the so it matches fine. A curl replay needs `X-Gitea-Event: push` and the
signature header, or it answers "No matching application or invalid signature header, or it answers "No matching application or invalid
signature." signature."
The app's `manual_webhook_secret_gitea` is **regenerated whenever the app
is recreated** — if the Coolify app is ever recreated, update the Gitea
hook's secret too (`PATCH /repos/TZGyn/tunnel/hooks/5` with
`{"config":{"secret":"<current>"}}`), or real deliveries silently fail
signature checks while curl replays still work.
This Coolify version stores `custom_labels` **base64-encoded** and does This Coolify version stores `custom_labels` **base64-encoded** and does
*not* merge its generated Traefik labels for API-created apps: the full *not* merge its generated Traefik labels for API-created apps: the full
label set must live in `custom_labels` (mirror a working app's generated label set must live in `custom_labels` (mirror a working app's generated