From 971b2e77899dc450dc94001cda5315f32f3d50a3 Mon Sep 17 00:00:00 2001
From: Hermes <hermes@hermes.local>
Date: Sat, 6 Jun 2026 17:17:01 +0000
Subject: [PATCH] docs: document webhook ALLOWED_HOST_LIST env var in Gitea
 section

---
 infrastructure.org | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/infrastructure.org b/infrastructure.org
index 312b4ac..88bd278 100644
--- a/infrastructure.org
+++ b/infrastructure.org
@@ -1116,9 +1116,12 @@ services:
 
 ** Gitea — Git Hosting
 
-Gitea hosts the infrastructure repo and triggers the tangle-deploy pipeline.
+Gitea hosts the infrastructure repo and personal projects at
+=git.gharbeia.net=. SSH on port 2222, web UI via Traefik Tunnel.
+
+Requires =GITEA__webhook__ALLOWED_HOST_LIST=private= to allow webhook
+delivery to the auto-deploy listener on the Docker bridge gateway.
 The runner connects via the authless internal entrypoint (:8083) so it can
-check out repos without SSO interference.
 
 #+BEGIN_SRC yaml :tangle /docker/compose/services/gitea.yaml
 services: