From f66611ce1832ad3b8411dc70ddd63074bae7911e Mon Sep 17 00:00:00 2001
From: Dmitry Karpukhin <d.karpukhin@firstvds.ru>
Date: Fri, 16 Jan 2026 11:17:32 +0800
Subject: [PATCH] =?UTF-8?q?=D0=B4=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=20=D0=BE=D0=B1=D1=80=D0=B0=D0=B1=D0=BE=D1=82=D1=87=D0=B8?=
 =?UTF-8?q?=D0=BA=20=D0=B2=D0=B5=D0=B1=D1=85=D1=83=D0=BA=D0=B0=20=D0=B3?=
 =?UTF-8?q?=D0=B8=D1=82=D0=BB=D0=B0=D0=B1=D0=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 public/pull.php | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 public/pull.php

diff --git a/public/pull.php b/public/pull.php
new file mode 100644
index 0000000..e973121
--- /dev/null
+++ b/public/pull.php
@@ -0,0 +1,28 @@
+<?php
+
+$key = "developer@zachem.info";
+$payload = trim(file_get_contents("php://input"));
+
+$hash = hash_hmac('sha256', $payload, $key, false);
+
+$signature = $_SERVER['HTTP_X_GITEA_SIGNATURE']?? '';
+
+// check payload signature against header signature
+if ($hash !== $signature)
+{
+	error_log('FAILED - payload signature mismatch');
+	exit();
+}
+
+$json = json_decode($payload, true);
+
+if (json_last_error() !== JSON_ERROR_NONE)
+{
+	error_log('FAILED - json decode - '. json_last_error());
+	exit();
+}
+
+if(strcmp($json['object_kind'], 'push') == 0)
+{
+	shell_exec("cd /var/www/lk && git reset --hard HEAD && git pull");
+}
\ No newline at end of file