Notifications

Get alerted on Slack, Discord, Teams, Telegram, or any HTTP endpoint when important events happen in Bella Baxter — without writing any webhook handling code.

Create a Notification Channel

From the WebApp: Settings → Notifications → Add Channel

Or via CLI:

# Slack
bella notifications create \
  --name "Ops Slack" \
  --type Slack \
  --webhook-url https://hooks.slack.com/services/T.../B.../xxx

# Discord
bella notifications create \
  --name "Dev Discord" \
  --type Discord \
  --webhook-url https://discord.com/api/webhooks/...

# Microsoft Teams
bella notifications create \
  --name "Security Teams" \
  --type MicrosoftTeams \
  --webhook-url https://outlook.office.com/webhook/...

# Telegram
bella notifications create \
  --name "Alerts Bot" \
  --type Telegram \
  --chat-id 123456789 \
  --bot-token 7890:...

# Generic HTTP webhook
bella notifications create \
  --name "PagerDuty" \
  --type Webhook \
  --url https://events.pagerduty.com/integration/.../enqueue \
  --method POST

Supported Channels

Type	Description
`Slack`	Slack Incoming Webhook
`Discord`	Discord Webhook
`MicrosoftTeams`	Teams Incoming Webhook
`Telegram`	Telegram Bot API
`Webhook`	Generic HTTP POST (custom payload template)

bella notifications subscribe \
  --channel "Ops Slack" \
  --events SecretDeleted,LeaseExpired,SecurityScanFailed \
  --project my-api

Event Types

The same event types as Webhooks are supported, plus notification-specific events:

Event	Description
`SecurityScanFailed`	A security scan detected weak or exposed secrets
`LeaseExpiringSoon`	A lease is expiring within the configured warn-before window
`ProviderConnectionFailed`	Bella cannot reach a provider (connectivity issue)
`secret.rotation.succeeded`	A rotation policy successfully rotated a secret
`secret.rotation.failed`	A rotation attempt failed
`secret.expiry.warning`	A secret is approaching its expiry date (N days remaining)
`secret.expired`	A secret has passed its expiry date and should be rotated or updated
`certificate.rotation.succeeded`	A certificate rotation completed — every eligible host is serving the new certificate
`certificate.rotation.partial`	Some hosts are serving the new certificate and some are not
`certificate.rotation.failed`	A rotation failed. The previous certificate is untouched and still being served
`certificate.rotation.missed`	A scheduled rotation came due but could not start

Certificate rotation messages

A channel subscribed to these receives one message per rotation naming the domain, the project/environment, the outcome and the host or certificate counts — not one message per host, and not one per certificate in a bulk appliance run. Failure messages name the failure category; a missed occurrence says why the rotation could not start.

Messages are metadata only: no certificate material, private keys, passphrases or secret values.

Retired in 2026-09. cert_rotation.completed and cert_rotation.failed were offered by the channel picker between 2026-05-03 and 2026-09-15 but were never emitted — a channel subscribed to either has always received nothing. Subscribe to the certificate.rotation.* types above instead.

If you stream business events to a SIEM. An audit-stream destination with the business-event mirror enabled will now also receive these four types alongside the certificate rotation audit rows it already receives — the same rotation seen per-rotation rather than per-host. New volume on an existing feed; no existing envelope changes.

Test a Channel

bella notifications test "Ops Slack"

Sends a test message to verify the channel is configured correctly.

Manage Channels

bella notifications list
bella notifications get "Ops Slack"
bella notifications update "Ops Slack" --active false   # pause
bella notifications delete "Ops Slack"

Example: Alert on Secret Deletion

bella notifications subscribe \
  --channel "Ops Slack" \
  --events SecretDeleted \
  --project my-api \
  --environment production

When someone deletes a production secret, a Slack message is sent immediately:

🔔 Secret deleted — DATABASE_URL was deleted from my-api / production by alice@example.com at 10:30 UTC

Example: Alert on Security Issues

bella notifications subscribe \
  --channel "Security Teams" \
  --events SecurityScanFailed \
  --all-projects

When a security scan detects a weak password or policy violation in any project, the Teams channel is notified.

Notifications are always free — alerting is an operational necessity, not an enterprise feature.

Notifications ​

Create a Notification Channel ​

Supported Channels ​

Subscribe a Channel to Events ​

Event Types ​

Certificate rotation messages ​

Test a Channel ​

Manage Channels ​

Example: Alert on Secret Deletion ​

Example: Alert on Security Issues ​