Add webhook-triggered rebuilds for Pelican sites

Adds a webhook-deploy service that listens for Codeberg push events and
triggers per-site nixos-rebuild runs. Skips rebuilds if the flake lock
revision is unchanged. Fixes root SSH client config so nix flake update
can reach Codeberg using the existing deploy key.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
randogoth 2026-05-14 13:36:10 +03:00
parent cd4d53386c
commit bb419a13af
4 changed files with 94 additions and 2 deletions

View file

@ -30,6 +30,9 @@ randogoth.com, www.randogoth.com {
}
sublunar.space, www.sublunar.space {
handle /hooks/* {
reverse_proxy localhost:9000
}
root * /var/www/sublunar.space/public
encode zstd gzip
file_server