webhook docs

# How-to

## Hooking up a project with the bots

By default, new projects do *not* have notifications setup in

`#tor-bots` like all the others. To do this, you need to configure a

"Webhook", in the `Settings -> Webhooks` section of the project. The

URL should be:

    https://kgb-bot.torproject.org/webhook/?channel=%23tor-bots

... and you should select the notifications you wish to see in

`#tor-bots`. You can also enable notifications to other channels by

adding more parameters to the URL. The parameters are documented the

[KGB documentation](https://salsa.debian.org/kgb-team/kgb/-/wikis/usage).

Note that GitLab admins might be able to configure [system-wide

hooks](https://gitlab.torproject.org/help/system_hooks/system_hooks) in [the admin section](https://gitlab.torproject.org/admin/hooks), although it's not entirely clear

how does relate to the per-project hooks so those have not been

enabled. Furthermore, it is possible for GitLab admins with root

access to enable webhooks on *all* projects, with the [webhook rake

task](https://docs.gitlab.com/ee/raketasks/web_hooks.html#webhooks). For example, running this on the GitLab server (currently

`gitlab-02`) will enable the above hook on all repositories:

    sudo gitlab-rake gitlab:web_hook:add URL='https://kgb-bot.torproject.org/webhook/?channel=%23tor-bots'

Note that by default, the rake task only enables `Push` events. You

need the following patch to enable others:

    modified   lib/tasks/gitlab/web_hook.rake

    @@ -10,7 +10,19 @@ namespace :gitlab do

           puts "Adding webhook '#{web_hook_url}' to:"

           projects.find_each(batch_size: 1000) do |project|

             print "- #{project.name} ... "

    -        web_hook = project.hooks.new(url: web_hook_url)

    +        web_hook = project.hooks.new(

    +          url: web_hook_url,

    +          push_events: true,

    +          issues_events: true,

    +          confidential_issues_events: false,

    +          merge_requests_events: true,

    +          tag_push_events: true,

    +          note_events: true,

    +          confidential_note_events: false,

    +          job_events: true,

    +          pipeline_events: true,

    +          wiki_page_events: true,

    +        )

             if web_hook.save

               puts "added".color(:green)

             else

See also the [upstream issue](https://gitlab.com/gitlab-org/gitlab/-/issues/17966) and [our GitLab issue 7](https://gitlab.torproject.org/tpo/tpa/gitlab/-/issues/7) for

details.

## Setting up two-factor authentication (2FA)

We strongly recommend you enable two-factor authentication on