From 081d5921e45e566c4886bce0e818ea5190e5b5df Mon Sep 17 00:00:00 2001
From: Alexander Hunt <me@liz.coffee>
Date: Sun, 21 Jun 2026 10:29:43 -0700
Subject: Fetches coolify secrets for webhook job host

---
 worker/scripts/coolify_webhook.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/worker/scripts/coolify_webhook.ts b/worker/scripts/coolify_webhook.ts
index d1b4eb0..8859023 100755
--- a/worker/scripts/coolify_webhook.ts
+++ b/worker/scripts/coolify_webhook.ts
@@ -43,8 +43,10 @@ await LogMetricTraceable.ofLogTraceable(_logJob)
     .map(async (tEitherJobVault) => {
         const eitherJobVault = await tEitherJobVault.get();
         return eitherJobVault.flatMapAsync(async ({ job, key, vault }) => {
-            tEitherJobVault.trace.trace('fetching coolify secret from vault...');
-            const eitherSecret = await vault.fetchSecret<SecureNote>(tEitherJobVault, key, 'coolify');
+            const coolifyHost = new URL(job.arguments.webhookUrl).hostname;
+            const secretName = `coolify--${coolifyHost}`;
+            tEitherJobVault.trace.trace(`fetching coolify secret from vault (${secretName})...`);
+            const eitherSecret = await vault.fetchSecret<SecureNote>(tEitherJobVault, key, secretName);
             await vault.lock(tEitherJobVault, key);
 
             eitherSecret.fold(
-- 
cgit v1.3