Docker Deployment

# Using Podman (recommended)
podman pull ghcr.io/myk-org/github-webhook-server:latest

# Using Docker
docker pull ghcr.io/myk-org/github-webhook-server:latest

services:
  github-webhook-server:
    container_name: github-webhook-server
    image: ghcr.io/myk-org/github-webhook-server:latest
    volumes:
      - "./webhook_server_data_dir:/home/podman/data:Z" # Should include config.yaml and webhook-server.private-key.pem
      # Mount temporary directories to prevent boot ID mismatch issues
      - "/tmp/podman-storage-${USER:-1000}:/tmp/storage-run-1000"
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Jerusalem
      - MAX_WORKERS=50 # Defaults to 10 if not set
      - WEBHOOK_SERVER_IP_BIND=0.0.0.0 # IP to listen
      - WEBHOOK_SERVER_PORT=5000 # Port to listen
      - WEBHOOK_SECRET=<secret> # If set verify hook is a valid hook from Github
      - VERIFY_GITHUB_IPS=1 # Verify hook request is from GitHub IPs
      - VERIFY_CLOUDFLARE_IPS=1 # Verify hook request is from Cloudflare IPs
      - ENABLE_LOG_SERVER=true # Enable log viewer endpoints (default: false)
      - ENABLE_MCP_SERVER=false # Enable MCP server for AI agent integration (default: false)
      # AI CLI API keys for pr-test-oracle integration
      # - ANTHROPIC_API_KEY=sk-ant-xxx       # Claude Code
      # - GEMINI_API_KEY=xxx                  # Gemini CLI
      # - CURSOR_API_KEY=xxx                  # Cursor Agent (API key method)
      # For Cursor interactive login: docker exec -it github-webhook-server agent
    ports:
      - "5000:5000"
    privileged: true
    restart: unless-stopped

# Start the service
docker-compose up -d

# View logs
docker-compose logs -f

# Stop the service
docker-compose down

volumes:
  - "./webhook_server_data_dir:/home/podman/data:Z"

volumes:
  - "/tmp/podman-storage-${USER:-1000}:/tmp/storage-run-1000"

HEALTHCHECK CMD curl --fail http://127.0.0.1:5000/webhook_server/healthcheck || exit 1

healthcheck:
  test:
    [
      "CMD",
      "curl",
      "--fail",
      "http://localhost:5000/webhook_server/healthcheck",
    ]
  interval: 30s
  timeout: 10s
  retries: 3
  start_period: 40s

# Clone the repository
git clone https://github.com/myakove/github-webhook-server.git
cd github-webhook-server

# Build with Podman
podman build --format docker -t github-webhook-server .

# Or with Docker
docker build -t github-webhook-server .

EXPOSE 5000

ENV USERNAME="podman"
ENV HOME_DIR="/home/$USERNAME"
ENV DATA_DIR="$HOME_DIR/data"
ENV APP_DIR="$HOME_DIR/github-webhook-server"

WORKDIR $APP_DIR

ENTRYPOINT ["tini", "--", "uv", "run", "entrypoint.py"]

podman run -d \
  --name github-webhook-server \
  -p 5000:5000 \
  -v ./data:/home/podman/data:Z \
  -e WEBHOOK_SECRET=your-secret \
  -e VERIFY_GITHUB_IPS=1 \
  -e ENABLE_LOG_SERVER=true \
  ghcr.io/myk-org/github-webhook-server:latest

docker run -d \
  --name github-webhook-server \
  -p 5000:5000 \
  -v ./data:/home/podman/data:Z \
  -e WEBHOOK_SECRET=your-secret \
  -e VERIFY_GITHUB_IPS=1 \
  -e ENABLE_LOG_SERVER=true \
  ghcr.io/myk-org/github-webhook-server:latest

privileged: false  # Disable if container building is not needed

# Docker Compose
docker-compose logs -f github-webhook-server

# Docker
docker logs -f github-webhook-server

# Podman
podman logs -f github-webhook-server

# Check volume ownership
ls -la ./webhook_server_data_dir

# Fix ownership (1000:1000 is the podman user in the container)
chown -R 1000:1000 ./webhook_server_data_dir

# Check if the server is running
curl http://localhost:5000/webhook_server/healthcheck

# Check container logs
docker logs github-webhook-server

# Add :Z to volume mounts in docker-compose.yaml
volumes:
  - "./webhook_server_data_dir:/home/podman/data:Z"