docs: all 13 Hookshot webhooks rotated #58

Merged
jared merged 1 commits from docs/rotated-remaining-webhooks into main 2026-11-03 17:03:12 -05:00
+10 -10
View File
@@ -358,24 +358,24 @@ Webhook URL format: `https://matrix.lotusguild.org/webhook/<uuid>`
> the table lists only the first 8 characters (enough to match Hookshot's logs); the full URLs
> live in each sender's settings. Full UUIDs were in this file from 2026-02-20 to 2026-11-03,
> so the IDs below are exposed in git history until rotated (see *Webhook secrets — rotating*).
> Grafana, Proxmox, Uptime Kuma and Ci-Alert were rotated on 2026-11-03 (the old IDs now return 404).
> All 13 were rotated on 2026-11-03, so the IDs in git history are dead (they return 404).
> CI (`readme-no-webhook-ids`) rejects full UUIDs in this README.
| Service | Webhook UUID | Notes |
|---------|-------------|-------|
| Grafana | `e713b383…` | Unified alerting contact point |
| Proxmox | `ca27432c…` | Notification system (8.1+), Discord embed format |
| Sonarr | `aeffc311…` | All event types |
| Radarr | `34913454…` | All event types |
| Readarr | `e57ab4f3…` | All event types |
| Lidarr | `66ac6fdd…` | All event types |
| Sonarr | `c3dde7ba…` | All event types |
| Radarr | `a7584167…` | All event types |
| Readarr | `3b30c0df…` | All event types |
| Lidarr | `aee60962…` | All event types |
| Uptime Kuma | `4b3fb94b…` | Status change notifications |
| Seerr | `555185af…` | Request/approval events |
| Owncast (Livestream) | `9993e911…` | STREAM_STARTED / STREAM_STOPPED |
| Bazarr | `470fb267…` | Subtitle events (Apprise JSON notifier) |
| Tinker-Tickets | `6e306faf…` | Custom transformation code |
| Seerr | `9c56d489…` | Request/approval events |
| Owncast (Livestream) | `ff37824a…` | STREAM_STARTED / STREAM_STOPPED |
| Bazarr | `263a8301…` | Subtitle events (Apprise JSON notifier) |
| Tinker-Tickets | `135b040b…` | Custom transformation code |
| Ci-Alert | `66c1aa17…` | Gitea Actions `notify-failure` jobs (org secret `MATRIX_WEBHOOK_URL`); transform `hookshot/ci-alert.js` |
| Devdesk | `4a3ccfc9…` | DevDesk "Claude needs you" (CT 126 `devdesk-notify-matrix`, URL in `/etc/devdesk/matrix-webhook`); transform `hookshot/devdesk.js`; avatar set via the appservice token |
| Devdesk | `db7df1a1…` | DevDesk "Claude needs you" (CT 126 `devdesk-notify-matrix`, URL in `/etc/devdesk/matrix-webhook`); transform `hookshot/devdesk.js`; avatar set via the appservice token |
**Hookshot notes:**
- Spam and Stuff is intentionally **unencrypted** — hookshot bridges cannot join E2EE rooms