Some automations do not need to receive webhooks directly. A bridge worker can poll or pull events over Tailnet/private egress, then write to your internal queue/database. This keeps the worker off the public internet.
flowchart LR
Scheduler["Nomad periodic job"] --> Poller["poller task"]
Poller -->|HTTP_PROXY| TS["tailscaled sidecar"]
TS --> Source["event source / API"]
Poller --> Queue["internal queue/db\nexample placeholder"]
nomad job validate examples/webhook-bridge/webhook-bridge.nomad.hclnomad job plan \
-var='poll_url=https://example.com/events' \
examples/webhook-bridge/webhook-bridge.nomad.hcl