btcpaymailer/docker-compose.yml
Erling c2b5d23477 Validate BTCPay webhooks with BTCPAY-SIG HMAC-SHA256
Replace URL token auth with the official webhook secret signature check.
Add SETUP.md and separate TEST_TOKEN for the Postmark test endpoint.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-08 12:20:00 +02:00

19 lines
846 B
YAML

version: '3.8'
services:
btcpay-mailer:
image: ${IMAGE_REGISTRY:-git.nxtgroup.org}/${IMAGE_OWNER:-erling}/${IMAGE_NAME:-btcpaymailer}:${IMAGE_TAG:-1.0.0}
container_name: ${CONTAINER_NAME:-btcpay-mailer}
restart: unless-stopped
ports:
- "${HOST_PORT:-5000}:5000"
environment:
BTCPAY_WEBHOOK_SECRET: ${BTCPAY_WEBHOOK_SECRET:?Set BTCPAY_WEBHOOK_SECRET in .env or environment}
TEST_TOKEN: ${TEST_TOKEN:?Set TEST_TOKEN in .env or environment}
BTCPAY_URL: ${BTCPAY_URL:-https://payment.nxtgroup.org}
BTCPAY_API_KEY: ${BTCPAY_API_KEY:?Set BTCPAY_API_KEY in .env or environment}
POSTMARK_API_KEY: ${POSTMARK_API_KEY:?Set POSTMARK_API_KEY in .env or environment}
FROM_EMAIL: ${FROM_EMAIL:-billing@nxtgroup.org}
BCC_EMAIL: ${BCC_EMAIL:-admin@nxtgroup.org}
DEBUG: ${DEBUG:-false}