Overview
webhook and nginx active, listeners
The webhook and nginx services reporting active under systemd, webhook version 2.8.3, and the loopback 127.0.0.1:9000 backend behind the nginx port 80 reverse proxy.
webhook and nginx active, listeners
Secure by default: one fixed demo hook
Authorized POST runs the command
No secret means HTTP 403
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
webhook - HTTP-to-Command Automation, Ready in Minutes
webhook is a lightweight, configurable tool written in Go that lets you create HTTP endpoints (hooks) on your server which run configured commands when called. It is the simplest way to wire an external event to an action on your machine - a Git push triggering a deployment, a CI job triggering a build step, or a monitoring alarm triggering a remediation script. This image delivers webhook fully installed and running as a systemd service behind an nginx reverse proxy, so a working endpoint runner is listening within minutes of launch, with no compilation, no manual unit authoring, and no configuration required to get started.
Why use this image instead of installing it yourself
Self-installing webhook means compiling Go source, writing systemd unit files, configuring nginx as a reverse proxy, generating authentication secrets, hardening the process with sandboxing directives, and enabling unattended security updates. This image eliminates every one of those steps. You launch, retrieve your per-instance secret, and start defining hooks. That makes it a fit for solo DevOps engineers, small platform teams, and teams that ship several times a day and want lightweight automation on a single EC2 instance without the overhead of a full orchestration platform.
Secure by default
Because webhook runs commands in response to HTTP requests, this image is locked down out of the box:
- One demo hook with a fixed, non-parameterised script - no request data ever reaches a shell, so a caller cannot inject a command.
- A per-instance trigger secret generated on first boot and never baked into the image. A request without the correct X-Webhook-Token header is rejected with HTTP 403 and the command never runs.
- webhook runs as a non-root restricted user with systemd sandboxing (NoNewPrivileges, ProtectSystem, PrivateTmp).
- Bound to loopback behind nginx rather than exposed directly to the internet.
- The operating system ships fully patched with unattended security updates enabled.
Compatible event sources
webhook responds to an HTTP POST from any service that can send one, so you can drive it from tools you already use, including source control (GitHub, GitLab, Bitbucket), CI/CD (Jenkins, AWS CodePipeline, CircleCI), monitoring and alerting (Amazon CloudWatch, PagerDuty, Slack), and scheduling (cron, Amazon EventBridge). You define the hooks; webhook runs the command when the endpoint is called with the correct secret.
What you get
- webhook 2.8.3 preinstalled and running under systemd
- nginx reverse proxy, ready to front with your own TLS certificate or domain
- Automatic restarts and clean journald logging via systemd
- A paired deployment guide that walks through triggering the demo hook, then defining and securing your own custom hooks
- 24/7 cloudimg technical support by email
Licensing and attribution
This is a repackaged open source software product with additional charges for cloudimg support services. webhook is distributed under the MIT license. cloudimg is not affiliated with or endorsed by the webhook project. All product and company names are trademarks or registered trademarks of their respective holders, and use of them does not imply any affiliation with or endorsement by them.
Highlights
- Turn HTTP requests into commands in minutes: define an endpoint (a hook) that runs a configured command when it is called, ideal for CI/CD deploy triggers, Git-push redeploys, and event-driven maintenance. Preinstalled and running under systemd behind an nginx reverse proxy, so a working endpoint runner is listening within minutes of launch with no compilation and no configuration required.
- Secure by default, because a webhook runs commands: the image ships exactly one demo hook whose command is fixed and non-parameterised (no request data ever reaches a shell, so a caller cannot inject a command), gated by a per-instance secret generated on first boot and never baked into the image. A request without the correct X-Webhook-Token is rejected with HTTP 403 and the command never runs.
- Hardened and production-ready: webhook runs as a non-root restricted user with systemd sandboxing, bound to loopback behind nginx rather than exposed directly. The OS ships fully patched with unattended security updates enabled, systemd handles automatic restarts and clean logging, and 24/7 cloudimg support is included.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
m5.large Recommended | m5.large | $0.08 |
t2.micro | t2.micro instance type | $0.04 |
t3.micro | t3.micro instance type | $0.04 |
c5a.12xlarge | c5a.12xlarge instance type | $0.24 |
c5a.16xlarge | c5a.16xlarge instance type | $0.24 |
c5a.24xlarge | c5a.24xlarge instance type | $0.24 |
c5a.2xlarge | c5a.2xlarge instance type | $0.24 |
c5a.4xlarge | c5a.4xlarge instance type | $0.24 |
c5a.8xlarge | c5a.8xlarge instance type | $0.24 |
c5a.large | c5a.large instance type | $0.08 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of webhook 2.8.3 as a ready-to-use HTTP endpoint command runner, with a fixed secure-by-default demo hook and its trigger secret generated on first boot behind an nginx reverse proxy.
Additional details
Usage instructions
Connect via SSH on port 22 as the default login user for your operating system variant (for the Ubuntu 24.04 variant the user is ubuntu). webhook starts automatically after first boot behind an nginx reverse proxy; the security group opens ports 22 (SSH) and 80 (the webhook endpoint via nginx). Retrieve the per-instance endpoint and trigger secret with: sudo cat /root/webhook-credentials.txt. Trigger the bundled demo hook. An unauthenticated request is refused with HTTP 403 and no command runs (curl -o /dev/null -sS -w '%{http_code}\n' -X POST http://<instance-public-ip>/hooks/demo), while an authenticated request runs the fixed demo command and returns its output (curl -X POST -H 'X-Webhook-Token: <secret>' http://<instance-public-ip>/hooks/demo). Define your own hooks by editing /etc/webhook/hooks.json and running sudo systemctl restart webhook; keep every command non-parameterised and secret-gated. Front port 80 with TLS (your own certificate or domain) for internet exposure. The service runs under systemd: systemctl status webhook nginx.
Resources
Vendor resources
Support
Vendor support
cloudimg provides 24/7 technical support for this product by email at support@cloudimg.co.uk . Our engineers assist with deployment, security group configuration, retrieving your per-instance trigger secret after first boot, authoring and securing custom hooks, nginx and TLS configuration, systemd service management and log review, and troubleshooting hook execution. For billing or refund inquiries, contact AWS Marketplace or cloudimg support. Support is included with your subscription.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.