Key bits:

durable SQLite/WAL-backed queue (survives restarts)

retries + dead-letter queue + requeue support

HMAC signature verification + replay protection + secret rotation

pull mode (useful for DMZ setups)

Prometheus metrics + OpenTelemetry tracing

hot reload for config changes

Repo + docs: https://github.com/nuetzliches/hookaido

Would love feedback on the model (push vs pull), operational ergonomics, and any missing “must-have” features for running this in production.