Any HTTP endpoint
Webhook
Send every event to your own HTTP or HTTPS endpoint, one request per event.
The webhook destination posts each event as JSON to the URL you set. The URL is stored as a secret and shown later only as its domain.
Add a signing secret and each request carries an HMAC-SHA256 signature over the timestamp and body in the x-pipeo-signature header, with the message id and timestamp in their own headers. Extra request headers are stored encrypted.
Addresses on private networks are refused, so a workspace cannot aim the worker at an internal host.