webhook - HTTP-to-Command Automation Server

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## webhook - HTTP-to-Command Automation, Ready in Minutes

webhook is a lightweight, configurable tool written in Go that lets you create HTTP endpoints (hooks) on your server which run configured commands when called. It is the simplest way to wire an external event to an action on your machine - a Git push triggering a deployment, a CI job triggering a build step, or a monitoring alarm triggering a remediation script. This image delivers webhook fully installed and running as a systemd service behind an nginx reverse proxy, so a working endpoint runner is listening within minutes of launch, with no compilation, no manual unit authoring, and no configuration required to get started.

## Why use this image instead of installing it yourself

Self-installing webhook means compiling Go source, writing systemd unit files, configuring nginx as a reverse proxy, generating authentication secrets, hardening the process with sandboxing directives, and enabling unattended security updates. This image eliminates every one of those steps. You launch, retrieve your per-instance secret, and start defining hooks. That makes it a fit for solo DevOps engineers, small platform teams, and teams that ship several times a day and want lightweight automation on a single EC2 instance without the overhead of a full orchestration platform.

## Secure by default

Because webhook runs commands in response to HTTP requests, this image is locked down out of the box:

• One demo hook with a fixed, non-parameterised script - no request data ever reaches a shell, so a caller cannot inject a command.
• A per-instance trigger secret generated on first boot and never baked into the image. A request without the correct X-Webhook-Token header is rejected with HTTP 403 and the command never runs.
• webhook runs as a non-root restricted user with systemd sandboxing (NoNewPrivileges, ProtectSystem, PrivateTmp).
• Bound to loopback behind nginx rather than exposed directly to the internet.
• The operating system ships fully patched with unattended security updates enabled.

## Compatible event sources

webhook responds to an HTTP POST from any service that can send one, so you can drive it from tools you already use, including source control (GitHub, GitLab, Bitbucket), CI/CD (Jenkins, AWS CodePipeline, CircleCI), monitoring and alerting (Amazon CloudWatch, PagerDuty, Slack), and scheduling (cron, Amazon EventBridge). You define the hooks; webhook runs the command when the endpoint is called with the correct secret.

## What you get

• webhook 2.8.3 preinstalled and running under systemd
• nginx reverse proxy, ready to front with your own TLS certificate or domain
• Automatic restarts and clean journald logging via systemd
• A paired deployment guide that walks through triggering the demo hook, then defining and securing your own custom hooks
• 24/7 cloudimg technical support by email

## Licensing and attribution

This is a repackaged open source software product with additional charges for cloudimg support services. webhook is distributed under the MIT license. cloudimg is not affiliated with or endorsed by the webhook project. All product and company names are trademarks or registered trademarks of their respective holders, and use of them does not imply any affiliation with or endorsement by them.