fix: declare social.occupymedia.cc as verified Mastodon dedupe origin

Media posts are two mutations (media upload + status create). The dispatch
gate fences the second mutation unless the origin is deployment-verified via
MASTODON_PUBLISH_DEDUPE_ORIGINS, so without it every media post died as
PUBLISH_OUTCOME_UNKNOWN after a successful upload.
This commit is contained in:
glass beadian 2026-10-15 19:37:31 +00:00
parent 3e4fb970c3
commit ef8d28bc26

View file

@ -98,6 +98,10 @@ services:
# Publishing workflows and the scheduler worker MUST share one queue,
# else approved publishes sit unconsumed.
TEMPORAL_TASK_QUEUE: ${TEMPORAL_TASK_QUEUE:-tmbh-publishing}
# Deployment-verified Mastodon Idempotency-Key origins (policy.ts). Media
# posts are two mutations (media upload + status create); the dispatch
# gate allows the second only for origins listed here.
MASTODON_PUBLISH_DEDUPE_ORIGINS: ${MASTODON_PUBLISH_DEDUPE_ORIGINS:-https://social.occupymedia.cc}
# Hub-as-OIDC-issuer signing keys (see docs/design/2026-10-13-files-oidc-sso.md).
OIDC_KEY_DIR: /var/lib/tmbh/oidc
volumes: