Updating certificates for incoming webhooks
You will need to update your certificates to enable incoming webhooks. For more information, see Certificates.
| Your certificate | What to do |
|---|---|
| Publicly trusted and covers the public hostname | Nothing. |
| Self-signed or internal | Disable SSL verification, or use a separate, trusted certificate for the webhook port. |
| The web client hostname is internal and you want verification on | Use a separate certificate for the webhook port, issued for the public hostname. |
It is best practice to keep SSL verification on. With it off, deliveries still have to be signed, but the connection isn't protected against interception.
Separate certificate for the webhook port:
- Docker - Copy the files into the container as
/usr/share/nginx/certificates/incoming-webhooks.pemandincoming-webhooks.key, then restart. You need both files, otherwise the web certificate is used. They're lost when the container is removed, the same asweb.pem. - Windows / Linux / macOS - Change the two
ssl_certificatelines in the block, then restart or reload nginx.