darman/homelab
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

relay: forward raw Gitea events unchanged

Browse Source
This commit is contained in:
luna
2026-08-23 02:31:32 +00:00
parent 7b36d95293
commit 6a037d557c
4 changed files with 26 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+7 -6
View File
@@ -37,13 +37,14 @@ scripts/ # deploy, edit_secrets
Hosts compose by importing `common.nix` + whichever `services/*` modules they
run. Each service module opens its own firewall ports.
## Gitea PR comment relay
## Gitea event relay
Mars includes a small HMAC-validating relay for Gitea webhooks. It normalizes
Gitea headers and forwards every authenticated JSON event to Hermes over
localhost; Hermes owns event selection, repository policy, and response
behavior. Jupiter's Gitea provisioning service registers the webhook
idempotently at `http://mars.orbit.sol:8645/gitea`.
Mars includes a small HMAC-validating relay for Gitea webhooks. It forwards the
authenticated request body unchanged, along with Gitea event and delivery
headers, to Hermes over localhost. The relay has no event, repository, action,
payload, or prompt policy; Hermes owns interpretation and response behavior.
Jupiter's Gitea provisioning service registers the webhook idempotently at
`http://mars.orbit.sol:8645/gitea`.
Before deploying either host, add the same random
`gitea_hermes_webhook_secret` value to both `secrets/mars.yaml` and