Updating certificates for incoming webhooks

You will need to update your certificates to enable incoming webhooks. For more information, see Certificates.

Your certificate What to do
Publicly trusted and covers the public hostname Nothing.
Self-signed or internal Disable SSL verification, or use a separate, trusted certificate for the webhook port.
The web client hostname is internal and you want verification on Use a separate certificate for the webhook port, issued for the public hostname.
It is best practice to keep SSL verification on. With it off, deliveries still have to be signed, but the connection isn't protected against interception.

Separate certificate for the webhook port:

  • Docker - Copy the files into the container as /usr/share/nginx/certificates/incoming-webhooks.pem and incoming-webhooks.key, then restart. You need both files, otherwise the web certificate is used. They're lost when the container is removed, the same as web.pem.
  • Windows / Linux / macOS - Change the two ssl_certificate lines in the block, then restart or reload nginx.