Archive

Webhook Secret Best Practices: Length, Storage, and Zero-Downtime Rotation

How long a webhook secret should be, static tokens vs HMAC signatures, storing secrets in environment variables, and rotating them with zero downtime.

Why You Shouldn't Use an Online Webhook Secret Generator

Online secret generators ask you to trust someone else's server with a value whose whole point is secrecy. Use your terminal, or your own browser console, instead.

How to Generate a Webhook Secret (Copy-Paste Commands for Linux, macOS, Windows)

Copy-paste terminal commands to generate a cryptographically strong webhook secret on Linux, macOS, and Windows, with no installs, and how to use it in a self-hosted receiver.

How to Receive Webhooks from Mastodon (Self-Hosted, Step by Step)

Receive and verify Mastodon admin webhooks on your own server: X-Hub-Signature HMAC-SHA256 validation with source-confirmed facts, the auto-generated signing secret, Docker setup, and RabbitMQ routing, every command verified locally.

How to Receive Webhooks from Healthchecks (Self-Hosted, Step by Step)

Receive Healthchecks up/down alerts as webhooks on your own server: variable-templated bodies, secret header authentication, the private-IP setting, Docker setup, and RabbitMQ routing, verified against real check flips.

How to Receive Webhooks from OpenProject (Self-Hosted, Step by Step)

Receive and verify OpenProject webhooks on your own server: X-OP-Signature HMAC-SHA1 validation with source-confirmed facts, the SSRF allowlist, Docker setup, and RabbitMQ routing, every command verified locally.

How to Receive Webhooks from Cal.com (Self-Hosted, Step by Step)

Receive and verify Cal.com booking webhooks on your own server: X-Cal-Signature-256 HMAC-SHA256 validation from source-confirmed facts, Docker setup, and RabbitMQ routing, every command verified locally.

How to Receive Webhooks from changedetection.io (Self-Hosted, Step by Step)

Receive changedetection.io change notifications as webhooks: the Apprise json:// target with a secret header, Docker setup, and RabbitMQ routing, verified against a real page-change cycle.

How to Receive Webhooks from Paperless-ngx (Self-Hosted, Step by Step)

Receive paperless-ngx workflow webhooks on your own server: Jinja placeholders, secret header authentication, the PAPERLESS_URL tip, Docker setup, and RabbitMQ routing, verified against real document consumptions.

How to Receive Webhooks from Metabase Alerts (Self-Hosted, Step by Step)

Receive Metabase alert webhooks on your own server: Bearer authentication, the host-strategy SSRF setting, the empty-body test ping gotcha, Docker setup, and RabbitMQ routing, verified against a real Metabase alert.

How to Receive Webhooks from Directus Flows (Self-Hosted, Step by Step)

Receive webhooks from Directus Flows on your own server: Event Hook triggers, the Webhook / Request URL operation with header authentication, Docker setup, and RabbitMQ routing, verified against a real Directus.

How to Receive Webhooks from Forgejo (Self-Hosted, Step by Step)

Receive and verify Forgejo webhooks on your own server: X-Forgejo-Signature HMAC-SHA256 validation, Gitea and GitHub compatibility headers, Docker setup, and RabbitMQ routing, verified against a real Forgejo 12.

How to Receive Webhooks from NocoDB (Self-Hosted, Step by Step)

Receive NocoDB record webhooks on your own server: secret header authentication, the {{ json event }} body template, the NC_ALLOW_LOCAL_HOOKS gotcha, Docker setup, and RabbitMQ routing, verified against a real NocoDB.

How to Receive Webhooks from Sonarr and Radarr (Self-Hosted, Step by Step)

Receive Sonarr, Radarr, and other *arr Connect webhook notifications on your own server with HTTP Basic authentication, Docker setup, and RabbitMQ routing, verified end to end against a real Sonarr v4.

How to Receive Webhooks from Home Assistant (Self-Hosted, Step by Step)

Receive webhooks sent by Home Assistant automations via rest_command: secret header authentication, templated JSON payloads, Docker setup, and RabbitMQ routing, verified against a real Home Assistant instance.

How to Receive Webhooks from Uptime Kuma (Self-Hosted, Step by Step)

Receive Uptime Kuma monitor alerts on your own server: Additional Headers token authentication, the heartbeat/monitor/msg payload, Docker setup, and RabbitMQ routing, verified against real Kuma state changes.

How to Receive Webhooks from n8n Workflows (Self-Hosted, Step by Step)

Receive webhooks sent by n8n HTTP Request nodes on your own server: Header Auth credential setup, constant-time token validation, Docker setup, and RabbitMQ routing, verified against a real n8n workflow execution.

How to Receive Webhooks from MinIO Bucket Notifications (Self-Hosted, Step by Step)

Receive MinIO S3 bucket event notifications on your own server with Bearer token authentication, mc event setup, queue_dir reliability, and RabbitMQ routing, verified end to end against a real MinIO.

How to Receive Webhooks from Sentry (Self-Hosted, Step by Step)

Receive and verify Sentry Integration Platform webhooks on your own server: Sentry-Hook-Signature HMAC-SHA256 validation, the 1-second response budget, Docker setup, and RabbitMQ routing, every command verified locally.

How to Receive Webhooks from Prometheus Alertmanager (Self-Hosted, Step by Step)

Receive Prometheus Alertmanager webhook notifications on your own server with Bearer token authentication, Docker setup, and RabbitMQ routing, verified end to end against a real Alertmanager 0.34.