Gitea push webhook
       │
       ▼
  API Gateway POST /webhook
       │
       ▼
  ci-dispatch Lambda
       │
       ├── runs-on: go/node/docker/godot
       │     → Start Fargate task with matching image
       │     → Track in DynamoDB for cancel
       │
       ├── runs-on: deploy
       │     → Invoke ci-exec Lambda directly
       │
       └── runs-on: host
             → Skip (handled by registered runner)

Deploy

Requires: AWS SAM CLI, AWS credentials, Gitea token.

# First time (interactive)
GITEA_TOKEN=xxx make deploy-guided

# Subsequent deploys
GITEA_TOKEN=xxx SUBNETS=subnet-abc,subnet-def SECURITY_GROUP=sg-xxx make deploy

After deploy, configure the webhook URL as a Gitea system webhook:

URL: https://<api-id>.execute-api.eu-west-1.amazonaws.com/prod/webhook
Method: POST
Content type: application/json
Events: Push, Workflow Job (for cancel)

Cancel support

When a user cancels a job in the Gitea UI, the workflow_job webhook fires with action: cancelled. The dispatcher looks up the Fargate task ARN in DynamoDB and calls ecs:StopTask.

A cleanup cron (every 5 min) also kills Fargate tasks that have been running longer than 30 minutes.

Local testing

make build
make test-local  # requires SAM CLI + Docker