From 39ef7ca9d5a524e178ddce5b608e5b3aecf2ffd4 Mon Sep 17 00:00:00 2001
From: Till JS <tills95@gmail.com>
Date: Mon, 27 Apr 2026 00:18:16 +0200
Subject: [PATCH] chore(compose): wire FEEDBACK_PSEUDONYM_SECRET into
 mana-analytics
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Required by the public-community-hub stamping. Compose enforces the
var via :? syntax — startup fails fast if .env.macmini is missing it,
which beats silently using the dev default in production.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 docker-compose.macmini.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker-compose.macmini.yml b/docker-compose.macmini.yml
index c39c4d0c5..045f835fc 100644
--- a/docker-compose.macmini.yml
+++ b/docker-compose.macmini.yml
@@ -583,6 +583,10 @@ services:
       DATABASE_URL: postgresql://postgres:${POSTGRES_PASSWORD:-mana123}@postgres:5432/mana_platform
       MANA_AUTH_URL: http://mana-auth:3001
       MANA_LLM_URL: http://mana-llm:3025
+      # Seeds the per-user display-hash for the public-community pseudonym
+      # ("Wachsame Eule #4528"). Set in .env.macmini — rotation re-keys
+      # only future pseudonyms, existing rows keep the old hash/name.
+      FEEDBACK_PSEUDONYM_SECRET: ${FEEDBACK_PSEUDONYM_SECRET:?missing in .env.macmini}
       CORS_ORIGINS: https://mana.how
     ports:
       - "3064:3064"