Tactical Media Broadcast Hub — initial release

Self-hosted multi-platform broadcast newsroom for activist collectives:
publishing pipeline with group approval and DST-proof scheduling, TweetDeck-style
column wall with hostile-content-safe rendering, live control room with Auto
Director, bridged chat governance with polls and quorum, distributed sandboxed
transcode workers, encrypted content-addressed archive, monthly analytics.

MIT licensed. See README.md and docs/.

infra/occupymedia/conduwuit.toml

@@ -0,0 +1,27 @@
+# Conduwuit — Matrix homeserver for occupymedia.cc (chat plane)
+# Mounted read-only by infra/occupymedia/docker-compose.yml.
+# Docs: docs/matrix-setup.md (branding, bridges, Tactical Media Broadcast Hub integration)
+
+[global]
+server_name = "chat.occupymedia.cc"   # user IDs become @name:chat.occupymedia.cc — PERMANENT
+address = "0.0.0.0"
+port = 6167                            # mapped to 127.0.0.1:8448 → Cloudflare tunnel (chat.occupymedia.cc)
+
+database_path = "/var/lib/conduwuit"
+database_backend = "rocksdb"
+
+# 20 MB uploads (Matrix media). Bigger files belong in the file-sharing layer.
+max_request_size = 20_000_000
+
+# First deploy: register the admin account with the token, then set
+# allow_registration = false and `docker compose restart conduwuit`.
+allow_registration = true
+registration_token = "CHANGE-ME-on-deploy"
+
+# Federation: on = your users can join rooms on other homeservers, other servers
+# can join yours (via chat.occupymedia.cc through the tunnel). Set false for a
+# closed chat island (restart required).
+allow_federation = true
+allow_room_creation = true
+
+# Rate limiting defaults are sane; tune only under load.