webhookd-update

Use webhookd behind basic auth to listen for github push events and run a script to fetch latest commit and do something afterwards.

First:

1. pick a basic auth password and write it down
2. pick a github push secret and write it down

On the server:

3. clone github repo into /root/site
4. install ncarlier/webhookd to /usr/local/bin/webhookd
5. copy files from this repo's etc and usr directory to /etc resp. /usr
6. run htpasswd /etc/webhookd/htpasswd gitpush with secret from step 1
7. in /etc/systemd/system/webhookd.service, set Environment=GITHUB_SECRET=xxx to secret from step 2
8. add custom scripting in /usr/local/bin/update-site
9. run systemctl daemon-reload
10. run systemctl enable webhookd
11. run systemctl start webhookd

Setup webhook in GitHub:

1. url: http://gitpush:<basicauthpassword><server-addr>:9999/github
2. secret: secret from step 2
3. trigger: just the push event