Add secure deploy webhook with local config example

2026-02-19 16:57:09 +03:00
parent b5c49caeb2
commit 6c57f8d5a7
4 changed files with 142 additions and 5 deletions
@@ -0,0 +1,25 @@
+<?php
+/**
+ * Copy this file to deploy-config.php and fill secrets.
+ * deploy-config.php is ignored by git.
+ */
+return [
+    // REQUIRED: long random token (40+ chars)
+    'token' => 'CHANGE_ME_TO_LONG_RANDOM_TOKEN',
+
+    // Optional: HTTP Basic auth layer
+    'basic_auth_user' => '',
+    'basic_auth_pass' => '',
+
+    // Optional: allow only these client IPs (empty = allow all)
+    'allowed_ips' => [
+        // '1.2.3.4',
+    ],
+
+    // Deploy options
+    'branch' => 'main',
+    'deploy_script' => __DIR__ . '/scripts/deploy.sh',
+
+    // Where to write webhook logs
+    'log_file' => __DIR__ . '/data/deploy-webhook.log',
+];