testing hermes webhook #56

Closed
pim wants to merge 2 commits from testing into master
Owner
No description provided.
Adds a feedback path so argunix commit-status updates on forgejo can
trigger a hermes agent run. Forgejo and hermes live on different LANs,
so the only viable path between roeland's forgejo container and the
hermes container on atlas is via tailscale.

- roeland: masquerade forgejo's bridge IP out tailscale0 (scoped to
  just forgejo, not the whole container bridge).
- forgejo: allow the tailnet CIDR in webhook.ALLOWED_HOST_LIST.
- hermes: enable platforms.webhook with a forgejo-status route,
  filtering on status events; open 8644/tcp on tailscale0 only.
  WEBHOOK_SECRET/WEBHOOK_ENABLED come from the sops env file.
Testing Hermes webhook
All checks were successful
argunix: packages.x86_64-linux.loki-mcp cache hit
argunix: packages.x86_64-linux.myNeovim cache hit
argunix: packages.x86_64-linux.paperless-mcp cache hit
argunix: nixosConfigurations.dave cache hit
argunix: evaluation 0 ok, 15 cached, 0 failed
argunix: nixosConfigurations.roeland cache hit
argunix: nixosConfigurations.atlas cache hit
argunix: packages.x86_64-linux.hass-mcp cache hit
argunix: packages.x86_64-linux.prometheus-mcp-server cache hit
argunix: nixosConfigurations.gamepc cache hit
argunix: nixosConfigurations.blocktech cache hit
argunix: devShells.x86_64-linux.default cache hit
argunix: nixosConfigurations.lewis cache hit
argunix: packages.x86_64-linux.formatter cache hit
argunix: packages.x86_64-linux.profilarr cache hit
argunix: nixosConfigurations.warwick cache hit
7cde237600
pim closed this pull request 2026-06-27 11:27:24 +02:00
All checks were successful
argunix: packages.x86_64-linux.loki-mcp cache hit
argunix: packages.x86_64-linux.myNeovim cache hit
argunix: packages.x86_64-linux.paperless-mcp cache hit
argunix: nixosConfigurations.dave cache hit
argunix: evaluation 0 ok, 15 cached, 0 failed
argunix: nixosConfigurations.roeland cache hit
argunix: nixosConfigurations.atlas cache hit
argunix: packages.x86_64-linux.hass-mcp cache hit
argunix: packages.x86_64-linux.prometheus-mcp-server cache hit
argunix: nixosConfigurations.gamepc cache hit
argunix: nixosConfigurations.blocktech cache hit
argunix: devShells.x86_64-linux.default cache hit
argunix: nixosConfigurations.lewis cache hit
argunix: packages.x86_64-linux.formatter cache hit
argunix: packages.x86_64-linux.profilarr cache hit
argunix: nixosConfigurations.warwick cache hit

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pim/nixos-configs!56
No description provided.