diff --git a/docker-compose.yml b/docker-compose.yml index 11c218b..3e1489e 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -23,6 +23,9 @@ services: image: oscript/backend ports: - "3030" + environment: + # Секрет подписи вебхука публикации из GitHub Actions (SITE_WEBHOOK_SECRET в OneScript) + - publish_secret volumes: - web_content:/var/www/ diff --git a/web/nginx/sites-enabled/oscript.io b/web/nginx/sites-enabled/oscript.io index 1a9d9bb..eac64f6 100644 --- a/web/nginx/sites-enabled/oscript.io +++ b/web/nginx/sites-enabled/oscript.io @@ -37,6 +37,17 @@ server { resolver 127.0.0.11 valid=30s; + # Вебхук публикации из GitHub Actions: сайт отвечает, когда уже скачал файлы версии с GitHub + location = /api/publish { + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header Host $host; + proxy_read_timeout 1200; + set $target_url http://site:3030; + proxy_pass $target_url; + } + location / { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr;