Workers can read the same config file as the server, but Cloud workers typically only need the endpoint and auth settings.
endpoint: https://api.your-domain.com
auth:
oauth2:
enabled: true
issuer: https://auth.your-domain.com
audience: githook-api
client_id: your-client-id
client_secret: your-client-secret
scopes: [githook.read]
Set GITHOOK_API_BASE_URL or GITHOOK_CONFIG_PATH if you prefer environment configuration. For OSS, you can still use local Watermill config and skip API-backed driver resolution.