Notification channels
Supported types
- webhook — generic HTTP POST with an HMAC-SHA256 signature
- email — SMTP
- slack — incoming webhook (no threading)
- slack_bot — bot token (with threading by fingerprint)
- telegram — bot API (threading via reply_to_message_id)
Webhook signing
X-Unimoni-Signature: <hex(hmac-sha256(secret, timestamp + "." + body))>
X-Unimoni-Timestamp: <unix-seconds>The receiver must:
- Check the timestamp ±5min from its own clock
- Recompute the HMAC and compare constant-time
A detailed receiver example is in Webhook receiver template.