trails/.github/workflows
Ullrich Schäfer 57f9440cf5 feat(staging): enable federation on persistent staging
social-federation rollout step 12.2 — inbound soak. Persistent staging
gets FEDERATION_ENABLED=true; PR previews keep the flag empty so
preview journals never emit federation traffic.

- docker-compose.staging.yml: journal accepts FEDERATION_ENABLED +
  FEDERATION_KEY_ENCRYPTION_KEY (both default empty).
- cd-staging.yml: persistent staging env sets FEDERATION_ENABLED=true;
  the encryption key arrives via the existing SOPS decryption.
- secrets.app.env: new FEDERATION_KEY_ENCRYPTION_KEY (SOPS-encrypted,
  generated with openssl rand -hex 32).

Production is unaffected: the flagship compose doesn't pass these vars
and the flag defaults off in code.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-06 15:45:44 +02:00
..
cd-apps.yml fix(sentry): remove hardcoded DSN fallbacks; supply via env in CI 2026-05-25 23:07:07 +02:00
cd-brouter.yml Update brouter deploy scp to single ssh 2026-04-24 14:41:30 +02:00
cd-infra.yml Rebuild the Journal home around a public feed and flagship marketing 2026-04-24 20:00:23 +02:00
cd-staging.yml feat(staging): enable federation on persistent staging 2026-06-06 15:45:44 +02:00
ci.yml ci: wire integration tests into the CI E2E job 2026-05-25 23:27:44 +02:00
dependabot-dedupe.yml Prefix dedupe commit message + set GH_TOKEN for push step 2026-04-19 21:06:38 +02:00
staging-cleanup.yml Fix concurrent preview deploy race: per-PR env files + server flock 2026-05-10 13:03:52 +02:00
update-visual-snapshots.yml Bump stefanzweifel/git-auto-commit-action from 5 to 7 2026-05-17 08:22:36 +00:00