diff --git a/module.nix b/module.nix index 1f3a9eb..c4dce6a 100644 --- a/module.nix +++ b/module.nix @@ -312,7 +312,13 @@ in Type = "simple"; RuntimeDirectory = "fdroid-webhook"; ExecStartPre = "+${makeHooks}"; - ExecStart = "${pkgs.webhook}/bin/webhook -hooks /run/fdroid-webhook/hooks.json -port ${toString cfg.webhookPort}"; + # -verbose, because without it this logs nothing at all about + # requests: not a delivery, not a rejection, not a 404 for an unknown + # hook id. A webhook whose secret or content type is wrong fails the + # HMAC check and is dropped, and the only remaining symptom is that + # releases quietly arrive a day late via the timer instead of at once. + # Silence is the one thing this must not do. + ExecStart = "${pkgs.webhook}/bin/webhook -hooks /run/fdroid-webhook/hooks.json -port ${toString cfg.webhookPort} -verbose"; Restart = "on-failure"; }; };