Add internal development webhook configuration

2026-07-25 02:13:13 +02:00
parent 67a14c125e
commit 053d601e93
5 changed files with 27 additions and 0 deletions
--- a/docs/ocsentinel-n8n-contract.md
+++ b/docs/ocsentinel-n8n-contract.md
@@ -32,6 +32,10 @@ The webhook itself may be reachable only on the internal network. It does not
 require public access to the n8n editor or API. Every managed device must be
 able to reach the webhook URL over HTTPS.

+For the isolated development environment only, HTTP is permitted at
+`http://172.16.41.197:5678/webhook/ocsentinel-ingest`. Do not reuse this URL,
+the development shared secret, or a disabled-TLS configuration in production.
+
 1. `Webhook`: accept `POST` on the configured private URL.
 2. `Code`: reject a request if `X-ATN-Device`, `X-ATN-Timestamp`,
   `X-ATN-Nonce`, `X-ATN-Version`, `X-ATN-Payload-SHA256`, or