From 6f0b492ecb58224752f107d35a1795da96f0df4f Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Mon, 6 Jul 2026 12:50:45 -0300 Subject: [PATCH 1/6] chore: add fragment webhook env example Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- .env.example | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.env.example b/.env.example index e10b8d0..a072235 100644 --- a/.env.example +++ b/.env.example @@ -13,6 +13,12 @@ TZ=America/Sao_Paulo # Xdebug Configuration XDEBUG_CONFIG="remote_host=172.17.0.1 remote_enable=1" +# LibreSign shared fragments +LIBRESIGN_HEADER_WEBHOOK_SECRET=change-me-header +LIBRESIGN_HEADER_WEBHOOK_ALLOWED_IPS= +LIBRESIGN_FOOTER_WEBHOOK_SECRET=change-me-footer +LIBRESIGN_FOOTER_WEBHOOK_ALLOWED_IPS= + WORDPRESS_CONFIG_EXTRA="define('WP_MAILPIT_HOST', 'mailpit'); define( 'SMTP_USER', 'user@example.com' ); // Username to use for SMTP authentication define( 'SMTP_PASS', 'smtp password' ); // Password to use for SMTP authentication From 321f30854e6651e32f78033a81fe7afa4e42217b Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Mon, 6 Jul 2026 12:50:45 -0300 Subject: [PATCH 2/6] chore: pass fragment webhook envs Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- common-services.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/common-services.yml b/common-services.yml index 1823a6a..960d96b 100644 --- a/common-services.yml +++ b/common-services.yml @@ -19,6 +19,10 @@ services: - WORDPRESS_LOCAL_USERS_PASSWORD=${WORDPRESS_LOCAL_USERS_PASSWORD:-} - WORDPRESS_LOCAL_RESET_ALL_USERS_PASSWORDS=${WORDPRESS_LOCAL_RESET_ALL_USERS_PASSWORDS:-0} - WORDPRESS_LOCAL_RESET_PASSWORD_FOR_USER=${WORDPRESS_LOCAL_RESET_PASSWORD_FOR_USER:-} + - LIBRESIGN_HEADER_WEBHOOK_SECRET=${LIBRESIGN_HEADER_WEBHOOK_SECRET:-} + - LIBRESIGN_HEADER_WEBHOOK_ALLOWED_IPS=${LIBRESIGN_HEADER_WEBHOOK_ALLOWED_IPS:-} + - LIBRESIGN_FOOTER_WEBHOOK_SECRET=${LIBRESIGN_FOOTER_WEBHOOK_SECRET:-} + - LIBRESIGN_FOOTER_WEBHOOK_ALLOWED_IPS=${LIBRESIGN_FOOTER_WEBHOOK_ALLOWED_IPS:-} - XDEBUG_CONFIG=${XDEBUG_CONFIG:-client_host=host.docker.internal start_with_request=yes} - XDEBUG_MODE=${XDEBUG_MODE:-off} - HOST_UID=${HOST_UID:-1000} From 1df9538ad8b3666fcac1075fbd9494c806d12f6c Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Mon, 6 Jul 2026 12:50:45 -0300 Subject: [PATCH 3/6] fix: allow large fragment webhook payloads Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- .docker/nginx/conf.d/default.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.docker/nginx/conf.d/default.conf b/.docker/nginx/conf.d/default.conf index 21129ce..c6f0cb0 100644 --- a/.docker/nginx/conf.d/default.conf +++ b/.docker/nginx/conf.d/default.conf @@ -3,6 +3,7 @@ server { server_name nginx localhost; index index.php index.html index.htm; root /var/www/html; + client_max_body_size 0; server_tokens off; # some security headers ( optional ) add_header X-Frame-Options "SAMEORIGIN" always; @@ -29,7 +30,6 @@ server { include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; - client_max_body_size 0; } location ~ /\.(ht|git) { deny all; From 105a06153a060a1545036abf4c0589bd61cfe7ce Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Mon, 6 Jul 2026 13:06:17 -0300 Subject: [PATCH 4/6] revert: remove fragment webhook envs from base stack Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- common-services.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/common-services.yml b/common-services.yml index 960d96b..1823a6a 100644 --- a/common-services.yml +++ b/common-services.yml @@ -19,10 +19,6 @@ services: - WORDPRESS_LOCAL_USERS_PASSWORD=${WORDPRESS_LOCAL_USERS_PASSWORD:-} - WORDPRESS_LOCAL_RESET_ALL_USERS_PASSWORDS=${WORDPRESS_LOCAL_RESET_ALL_USERS_PASSWORDS:-0} - WORDPRESS_LOCAL_RESET_PASSWORD_FOR_USER=${WORDPRESS_LOCAL_RESET_PASSWORD_FOR_USER:-} - - LIBRESIGN_HEADER_WEBHOOK_SECRET=${LIBRESIGN_HEADER_WEBHOOK_SECRET:-} - - LIBRESIGN_HEADER_WEBHOOK_ALLOWED_IPS=${LIBRESIGN_HEADER_WEBHOOK_ALLOWED_IPS:-} - - LIBRESIGN_FOOTER_WEBHOOK_SECRET=${LIBRESIGN_FOOTER_WEBHOOK_SECRET:-} - - LIBRESIGN_FOOTER_WEBHOOK_ALLOWED_IPS=${LIBRESIGN_FOOTER_WEBHOOK_ALLOWED_IPS:-} - XDEBUG_CONFIG=${XDEBUG_CONFIG:-client_host=host.docker.internal start_with_request=yes} - XDEBUG_MODE=${XDEBUG_MODE:-off} - HOST_UID=${HOST_UID:-1000} From d7d2694bdbeadd3c1825277c5e408c76da46ffc4 Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Mon, 6 Jul 2026 13:06:17 -0300 Subject: [PATCH 5/6] revert: remove libresign env example entries Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- .env.example | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.env.example b/.env.example index a072235..e10b8d0 100644 --- a/.env.example +++ b/.env.example @@ -13,12 +13,6 @@ TZ=America/Sao_Paulo # Xdebug Configuration XDEBUG_CONFIG="remote_host=172.17.0.1 remote_enable=1" -# LibreSign shared fragments -LIBRESIGN_HEADER_WEBHOOK_SECRET=change-me-header -LIBRESIGN_HEADER_WEBHOOK_ALLOWED_IPS= -LIBRESIGN_FOOTER_WEBHOOK_SECRET=change-me-footer -LIBRESIGN_FOOTER_WEBHOOK_ALLOWED_IPS= - WORDPRESS_CONFIG_EXTRA="define('WP_MAILPIT_HOST', 'mailpit'); define( 'SMTP_USER', 'user@example.com' ); // Username to use for SMTP authentication define( 'SMTP_PASS', 'smtp password' ); // Password to use for SMTP authentication From 526ee809868a9ceba8d0be6fa9995f6426685af7 Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Mon, 6 Jul 2026 13:06:17 -0300 Subject: [PATCH 6/6] revert: remove saas nginx payload override Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- .docker/nginx/conf.d/default.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/.docker/nginx/conf.d/default.conf b/.docker/nginx/conf.d/default.conf index c6f0cb0..e75d1e6 100644 --- a/.docker/nginx/conf.d/default.conf +++ b/.docker/nginx/conf.d/default.conf @@ -3,7 +3,6 @@ server { server_name nginx localhost; index index.php index.html index.htm; root /var/www/html; - client_max_body_size 0; server_tokens off; # some security headers ( optional ) add_header X-Frame-Options "SAMEORIGIN" always;