social-federation rollout step 12.2 — inbound soak. Persistent staging gets FEDERATION_ENABLED=true; PR previews keep the flag empty so preview journals never emit federation traffic. - docker-compose.staging.yml: journal accepts FEDERATION_ENABLED + FEDERATION_KEY_ENCRYPTION_KEY (both default empty). - cd-staging.yml: persistent staging env sets FEDERATION_ENABLED=true; the encryption key arrives via the existing SOPS decryption. - secrets.app.env: new FEDERATION_KEY_ENCRYPTION_KEY (SOPS-encrypted, generated with openssl rand -hex 32). Production is unaffected: the flagship compose doesn't pass these vars and the flag defaults off in code. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| workflows | ||
| copilot-instructions.md | ||
| dependabot.yml | ||