# Notifies the lab's gitsync service that this repo has moved, so the mirror on
# our self-hosted sourcehut updates within seconds instead of waiting for its
# hourly safety-net poll. That matters beyond the mirror itself: builds.sr.ht CI
# (see .build.yml) only fires once the commit lands on the sourcehut side, so
# this webhook is what makes push -> apk build feel immediate.
#
# The receiver verifies the HMAC-SHA256 in X-Src-Signature over the request
# body. The signing key is generated by SourceCraft, is not part of this file,
# and is read once from Автоматизации -> Вебхуки into the gitsync stack's .env.
#
# The slug is unique per repository, but the receiver serves all three repos and
# maps slug -> signing key, so it must be unique ACROSS them too — hence the
# suffix rather than a plain "gitsync".
webhooks:
  hooks:
    - slug: gitsync-spec
      name: "gitsync mirror trigger"
      description: "Triggers the phoebe gitsync service to mirror sr-ht-spec to git.srht.bigb.es"
      url: "https://gitsync.bigb.es/hook"
      ssl_verification: true
      active: true
  on:
    push:
      - hooks: ["gitsync-spec"]