SCRUM-45: Caddy carve-out for the EasyPost return webhook #1

Closed
bastian wants to merge 3 commits from returns-refund/easypost-webhook-caddy into master
Owner

The Fulfillr host is IP-restricted, so EasyPost's servers can't reach it. Adds a narrow handle /webhooks/easypost before the IP restriction (handle blocks are mutually exclusive, first match wins) for prod (:9054) and dev (:9055) so the HMAC-verified tracker webhook is reachable while the rest of the host stays locked down.

Part of epic SCRUM-42. Deploy: make deploy TAGS=fulfillr-dev / fulfillr (re-renders the Caddyfile).

🤖 Generated with Claude Code

The Fulfillr host is IP-restricted, so EasyPost's servers can't reach it. Adds a narrow `handle /webhooks/easypost` **before** the IP restriction (handle blocks are mutually exclusive, first match wins) for prod (`:9054`) and dev (`:9055`) so the HMAC-verified tracker webhook is reachable while the rest of the host stays locked down. Part of epic **SCRUM-42**. Deploy: `make deploy TAGS=fulfillr-dev` / `fulfillr` (re-renders the Caddyfile). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
bastian added 3 commits 2026-06-12 20:25:31 -04:00
The Fulfillr host is IP-restricted, so EasyPost's servers can't reach it. Add a
narrow `handle /webhooks/easypost` before the IP restriction (handle blocks are
mutually exclusive, first match wins) for prod (:9054) and dev (:9055) so the
HMAC-verified tracker webhook is reachable while the rest of the host stays locked.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
bastian closed this pull request 2026-06-12 20:30:25 -04:00

Pull request closed

Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bastian/deploy_home#1