The task-webhook host is an inbound webhook receiver: Forgejo (a machine with no Authentik SSO cookie) POSTs issue/comment events, so forward-auth 302-bounced every delivery and silently dropped all webhooks. Flip only this ingress to auth=none; the do_POST handler gates on payload action + bot-user filtering. Gateway (openclaw) and openlobster stay auth=required. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| files | ||
| .terraform.lock.hcl | ||
| backend.tf | ||
| main.tf | ||
| providers.tf | ||
| secrets | ||
| terragrunt.hcl | ||