refactor(discord): align on gateway-only ingestion

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

Author: yordis

devops/docker/compose/.env.example

@@ -35,15 +35,12 @@
 # TROGON_SOURCE_LINEAR_TIMESTAMP_TOLERANCE_SECS=60
 
 # --- Discord Source ---
-# TROGON_SOURCE_DISCORD_MODE=gateway      # "gateway" (WebSocket, all events) or "webhook" (HTTP, interactions only)
-# TROGON_SOURCE_DISCORD_BOT_TOKEN=        # required when mode=gateway
+# TROGON_SOURCE_DISCORD_BOT_TOKEN=
 # TROGON_SOURCE_DISCORD_GATEWAY_INTENTS=guilds,guild_members,guild_messages,guild_message_reactions,direct_messages,message_content,guild_voice_states
-# TROGON_SOURCE_DISCORD_PUBLIC_KEY=       # required when mode=webhook
 # TROGON_SOURCE_DISCORD_SUBJECT_PREFIX=discord
 # TROGON_SOURCE_DISCORD_STREAM_NAME=DISCORD
 # TROGON_SOURCE_DISCORD_STREAM_MAX_AGE_SECS=604800
 # TROGON_SOURCE_DISCORD_NATS_ACK_TIMEOUT_SECS=10
-# TROGON_SOURCE_DISCORD_NATS_REQUEST_TIMEOUT_SECS=2
 
 # --- Telegram Source ---
 # TROGON_SOURCE_TELEGRAM_WEBHOOK_SECRET=

devops/docker/compose/compose.yml

@@ -32,15 +32,12 @@ services:
       TROGON_SOURCE_GITHUB_STREAM_MAX_AGE_SECS: "${TROGON_SOURCE_GITHUB_STREAM_MAX_AGE_SECS:-604800}"
       TROGON_SOURCE_GITHUB_NATS_ACK_TIMEOUT_SECS: "${TROGON_SOURCE_GITHUB_NATS_ACK_TIMEOUT_SECS:-10}"
 
-      TROGON_SOURCE_DISCORD_MODE: "${TROGON_SOURCE_DISCORD_MODE:-}"
       TROGON_SOURCE_DISCORD_BOT_TOKEN: "${TROGON_SOURCE_DISCORD_BOT_TOKEN:-}"
       TROGON_SOURCE_DISCORD_GATEWAY_INTENTS: "${TROGON_SOURCE_DISCORD_GATEWAY_INTENTS:-}"
-      TROGON_SOURCE_DISCORD_PUBLIC_KEY: "${TROGON_SOURCE_DISCORD_PUBLIC_KEY:-}"
       TROGON_SOURCE_DISCORD_SUBJECT_PREFIX: "${TROGON_SOURCE_DISCORD_SUBJECT_PREFIX:-discord}"
       TROGON_SOURCE_DISCORD_STREAM_NAME: "${TROGON_SOURCE_DISCORD_STREAM_NAME:-DISCORD}"
       TROGON_SOURCE_DISCORD_STREAM_MAX_AGE_SECS: "${TROGON_SOURCE_DISCORD_STREAM_MAX_AGE_SECS:-604800}"
       TROGON_SOURCE_DISCORD_NATS_ACK_TIMEOUT_SECS: "${TROGON_SOURCE_DISCORD_NATS_ACK_TIMEOUT_SECS:-10}"
-      TROGON_SOURCE_DISCORD_NATS_REQUEST_TIMEOUT_SECS: "${TROGON_SOURCE_DISCORD_NATS_REQUEST_TIMEOUT_SECS:-2}"
 
       TROGON_SOURCE_SLACK_SIGNING_SECRET: "${TROGON_SOURCE_SLACK_SIGNING_SECRET:-}"
       TROGON_SOURCE_SLACK_SUBJECT_PREFIX: "${TROGON_SOURCE_SLACK_SUBJECT_PREFIX:-slack}"

devops/docker/compose/services/trogon-gateway/README.md

@@ -2,15 +2,14 @@
 
 `trogon-gateway` is the unified inbound pipe for platform events into NATS
 JetStream. It runs all configured sources in a single process behind a single
-HTTP server.
+HTTP server, plus the optional Discord gateway runner.
 
 All webhook sources share one port (default `8080`) and are routed by path
 prefix:
 
 | Source | Webhook path | Required env var |
 |---|---|---|
 | GitHub | `/github/webhook` | `TROGON_SOURCE_GITHUB_WEBHOOK_SECRET` |
-| Discord | `/discord/webhook` | `TROGON_SOURCE_DISCORD_MODE` |
 | Slack | `/slack/webhook` | `TROGON_SOURCE_SLACK_SIGNING_SECRET` |
 | Telegram | `/telegram/webhook` | `TROGON_SOURCE_TELEGRAM_WEBHOOK_SECRET` |
 | GitLab | `/gitlab/webhook` | `TROGON_SOURCE_GITLAB_WEBHOOK_SECRET` |
@@ -38,33 +37,15 @@ cp .env.example .env
 docker compose up
 ```
 
-## Discord modes
-
-Discord supports two mutually exclusive modes via `TROGON_SOURCE_DISCORD_MODE`:
-
-| Mode | Transport | Events | Requires |
-|---|---|---|---|
-| `gateway` | WebSocket (you connect to Discord) | Everything | `TROGON_SOURCE_DISCORD_BOT_TOKEN` |
-| `webhook` | HTTP POST (Discord connects to you) | Interactions only | `TROGON_SOURCE_DISCORD_PUBLIC_KEY` |
-
-### Gateway mode
+## Discord gateway
 
 ```bash
-TROGON_SOURCE_DISCORD_MODE=gateway \
 TROGON_SOURCE_DISCORD_BOT_TOKEN=<token> \
 docker compose up
 ```
 
-### Webhook mode
-
-```bash
-TROGON_SOURCE_DISCORD_MODE=webhook \
-TROGON_SOURCE_DISCORD_PUBLIC_KEY=<hex-key> \
-docker compose --profile dev up
-```
-
-Find the ngrok tunnel URL in `docker compose logs ngrok`, then set it as
-your Discord application's Interactions Endpoint URL (append `/discord/webhook`).
+Discord does not use the HTTP ingress or ngrok. It opens an outbound WebSocket
+connection to Discord and publishes every gateway event to NATS.
 
 ## incident.io webhooks
 

rsworkspace/Cargo.lock

@@ -7,7 +7,7 @@ How to run the unified ingress gateway that receives source events and publishes
 `trogon-gateway` starts:
 
 - One HTTP server for webhook-based sources
-- Optional Discord Gateway (WebSocket) runner when Discord is configured in `gateway` mode
+- Optional Discord Gateway (WebSocket) runner when Discord is enabled
 - JetStream stream provisioning for every enabled source
 - Health probes at `GET /-/liveness` and `GET /-/readiness`
 
@@ -34,7 +34,6 @@ All webhook sources share one HTTP port (`TROGON_GATEWAY_PORT`, default `8080`)
 | Source | Route |
 |---|---|
 | GitHub | `/github/webhook` |
-| Discord (webhook mode) | `/discord/webhook` |
 | Slack | `/slack/webhook` |
 | Telegram | `/telegram/webhook` |
 | GitLab | `/gitlab/webhook` |
@@ -47,8 +46,7 @@ A source is enabled only when its required setting is present:
 | Source | Required setting |
 |---|---|
 | GitHub | `TROGON_SOURCE_GITHUB_WEBHOOK_SECRET` |
-| Discord (`gateway`) | `TROGON_SOURCE_DISCORD_MODE=gateway` and `TROGON_SOURCE_DISCORD_BOT_TOKEN` |
-| Discord (`webhook`) | `TROGON_SOURCE_DISCORD_MODE=webhook` and `TROGON_SOURCE_DISCORD_PUBLIC_KEY` |
+| Discord | `TROGON_SOURCE_DISCORD_BOT_TOKEN` |
 | Slack | `TROGON_SOURCE_SLACK_SIGNING_SECRET` |
 | Telegram | `TROGON_SOURCE_TELEGRAM_WEBHOOK_SECRET` |
 | GitLab | `TROGON_SOURCE_GITLAB_WEBHOOK_SECRET` |
@@ -78,7 +76,6 @@ Per-source optional tuning (with defaults):
 Source-specific extras:
 
 - `TROGON_SOURCE_DISCORD_GATEWAY_INTENTS`
-- `TROGON_SOURCE_DISCORD_NATS_REQUEST_TIMEOUT_SECS` (default: `2`)
 - `TROGON_SOURCE_SLACK_TIMESTAMP_MAX_DRIFT_SECS` (default: `300`)
 - `TROGON_SOURCE_LINEAR_TIMESTAMP_TOLERANCE_SECS` (default: `60`, `0` disables tolerance)
 
@@ -102,10 +99,7 @@ url = "localhost:4222"
 webhook_secret = "gh-secret"
 
 [sources.discord]
-mode = "webhook"
-public_key = "<discord-public-key-hex>"
-# mode = "gateway"
-# bot_token = "<discord-bot-token>"
+bot_token = "<discord-bot-token>"
 
 [sources.slack]
 signing_secret = "slack-secret"