Disable legacy HTTP image hooks by default

2026-08-06 11:25:39 +00:00
parent f04b81c606
commit 87cc2977d5
5 changed files with 36 additions and 2 deletions
@@ -77,6 +77,13 @@ Use branch filter `master`. Disable the old PHP webhook before enabling the new
 writer. The legacy PHP files remain in `hook/` for an explicit rollback, but
 PHP and Node must never mutate the checkout concurrently.

+Legacy HTTP mutation is disabled by default. An emergency PHP rollback must
+first stop `image-hook`, then create the ignored `hook/legacy-enabled` sentinel
+in the legacy checkout before restoring its Caddy/Gitea route. Remove the
+sentinel before Node is started again. CLI execution of `hook/git_pull.php`
+from the `hook/` directory remains available for local recovery without
+exposing the HTTP endpoint.
+
 ### Start and verify

 ```sh