From ef8d28bc2624e2125c7df3a4fd94341c39ca6232 Mon Sep 17 00:00:00 2001 From: glass beadian Date: Thu, 15 Oct 2026 19:37:31 +0000 Subject: [PATCH] fix: declare social.occupymedia.cc as verified Mastodon dedupe origin Media posts are two mutations (media upload + status create). The dispatch gate fences the second mutation unless the origin is deployment-verified via MASTODON_PUBLISH_DEDUPE_ORIGINS, so without it every media post died as PUBLISH_OUTCOME_UNKNOWN after a successful upload. --- infra/occupymedia/docker-compose.app.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/infra/occupymedia/docker-compose.app.yml b/infra/occupymedia/docker-compose.app.yml index 9113fc4..34a5117 100644 --- a/infra/occupymedia/docker-compose.app.yml +++ b/infra/occupymedia/docker-compose.app.yml @@ -98,6 +98,10 @@ services: # Publishing workflows and the scheduler worker MUST share one queue, # else approved publishes sit unconsumed. TEMPORAL_TASK_QUEUE: ${TEMPORAL_TASK_QUEUE:-tmbh-publishing} + # Deployment-verified Mastodon Idempotency-Key origins (policy.ts). Media + # posts are two mutations (media upload + status create); the dispatch + # gate allows the second only for origins listed here. + MASTODON_PUBLISH_DEDUPE_ORIGINS: ${MASTODON_PUBLISH_DEDUPE_ORIGINS:-https://social.occupymedia.cc} # Hub-as-OIDC-issuer signing keys (see docs/design/2026-10-13-files-oidc-sso.md). OIDC_KEY_DIR: /var/lib/tmbh/oidc volumes: