From 0dfd1e5d1f4717fd047f6e007a92e5ef504c42cd Mon Sep 17 00:00:00 2001
From: Eugene Blikh <bigbes@gmail.com>
Date: Fri, 7 Aug 2026 07:54:25 +0300
Subject: [PATCH] ci: gitsync mirror webhook for the srht mirror

---
 .sourcecraft/webhooks.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 .sourcecraft/webhooks.yaml

diff --git a/.sourcecraft/webhooks.yaml b/.sourcecraft/webhooks.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..15441df8dda8c6bd9d7e990e9a00a589c71bc6fb
--- /dev/null
+++ b/.sourcecraft/webhooks.yaml
@@ -0,0 +1,22 @@
+# Notifies the lab's gitsync service that this repo has moved, so the mirror on
+# our self-hosted sourcehut updates within seconds instead of waiting for its
+# hourly safety-net poll.
+#
+# The receiver verifies the HMAC-SHA256 in X-Src-Signature over the request
+# body. The signing key is generated by SourceCraft, is not part of this file,
+# and is read once from Автоматизации -> Вебхуки into the gitsync stack's .env.
+#
+# The slug is unique per repository, but the receiver serves all mirrored repos
+# and maps slug -> signing key, so it must be unique ACROSS them too — hence the
+# suffix rather than a plain "gitsync".
+webhooks:
+  hooks:
+    - slug: gitsync-ecore
+      name: "gitsync mirror trigger"
+      description: "Triggers the phoebe gitsync service to mirror sr-ht-ecore to git.srht.bigb.es"
+      url: "https://gitsync.bigb.es/hook"
+      ssl_verification: true
+      active: true
+  on:
+    push:
+      - hooks: ["gitsync-ecore"]