Self-host WebHook
7.3.3Hardened webhook-to-command runner for self-hosted use
- Stars
- 143
- Port
- 9000 (HTTP webhook server)
soulteary/webhookWhat is WebHook?
WebHook runs as a self-hosted webhook-to-command runner for production use in self-hosted, edge, and private networks. The software accepts HTTP requests, checks them against trigger rules such as HMAC signatures, IP allowlists, and payload matching, then runs allowed commands with request data supplied as arguments or environment variables. Core capabilities include a command allowlist, strict argument validation, adjustable concurrency and rate limiting with optional Redis-backed distributed limiting, Prometheus metrics, OpenTelemetry tracing, audit logging, hot configuration reload, and a web-based config generator. It works with JSON and YAML hook definitions using Go templating and stays compatible with adnanh/webhook configs. The project ships multi-architecture Docker images in core, runner, and extended variants, plus Homebrew, Go install, and pre-built binaries. It listens on port 9000 by default and needs no external database, though Redis is optional for distributed rate limiting.
Should you self-host WebHook?
WebHook scores 49/100 on selfhost.directory (how scoring works) and ranks #82 of 166 in Developer Tools. It has 143 GitHub stars.
It shipped 10 stable releases in the past year. The latest, 7.3.3, came out on 22 October 2026. New versions land roughly every 2 weeks.
Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is MIT-licensed and written mostly in Go.
Its closest alternative on selfhost.directory is openhands (87/100, 92 068 stars). It scores higher overall, so compare the two before you pick. See WebHook vs openhands side by side.
Features
- Argument validation
- Audit Logging
- Command path whitelisting
- Go template support
- HMAC signature validation
- Hot configuration reload
- IP Whitelisting
- OpenAPI/Swagger specRecommend debugging/intranet only
- OpenTelemetry tracing
- Prometheus Metrics
- Rate Limiting
- Strict mode
- Web-based config generator UINo authentication; recommend only for debugging or intranet
WebHook README
More in Automation
whats-up-dockerKeep your containers up-to-date!
WOMLWOML is an open-source, self-hosted workflow orchestration language for writing durable automations as readable HTML-like documents with embedded JavaScript.
ytdl-sub-guiOpen-source, self-hosted CLI that drives yt-dlp to pull videos and music and format them for Plex, Jellyfin, Emby or Kodi with YAML presets and NFO or audio tags.
YTPTubeYTPTube is an open-source, self-hosted download manager built on yt-dlp with scheduled tasks, metadata conditions, and Kodi-compatible NFO generation for media servers.
ytsyncSelf-hosted open-source tool that automatically downloads YouTube videos on a schedule with Plex/Jellyfin integration and Docker deployment.
Zed Attack Proxy (ZAP)Self-hosted, open-source web app security scanner: an intercepting proxy with passive and active scans, three spiders, API scans and Docker automation for CI/CD.
ZerobyteOpen-source, self-hosted backup automation built on Restic: cron schedules, encrypted S3/GCS/Azure/rclone repositories, file-level restores and alerts from a web UI.
ZeroClawA self-hosted, open-source AI personal assistant runtime: one Rust binary with 70+ LLM providers, 30+ channels like Telegram and Discord, and sandboxed tool use.
µTaskSelf-hosted, open-source automation engine from OVH that runs YAML-defined task workflows on a Postgres-backed, horizontally scalable Go server with a dashboard.
5dive5dive runs persistent AI agents as systemd services on your Linux server with a shared SQLite task queue and human-in-the-loop approval via Telegram/Discord.
ActionsflowWorkflow automation tool for developers based on GitHub Actions. Free self-hosted alternative to Zapier and IFTTT using YAML files to connect apps and automate workflows.
active_workflowSelf-hosted agent-based orchestration platform: build, schedule and monitor polyglot workflow services through a web UI, a REST API and a Remote Agent API.
0 comments