# 方式一：config:show 查看像素配置组（pixelfed 配置键）
docker compose exec pixelfed php artisan config:show pixelfed

  max_photo_size ....................................................... 15000
  max_caption_length ..................................................... 500
  max_album_length ......................................................... 4
  image_quality ........................................................... 80

# 方式二：tinker 查看实例配置缓存层取值
docker compose exec pixelfed php artisan tinker --execute='echo var_export(config_cache("pixelfed.max_album_length"),true);'

4

# 第 1 步：编辑 /opt/pixelfed/.env（本文以 sed 为例，手改亦可）
sed -i 's/MAX_ALBUM_LENGTH="4"/MAX_ALBUM_LENGTH="6"/' /opt/pixelfed/.env
# 第 2 步：重建服务使新环境变量进入运行时（restart 不重读 .env，实测无效）
cd /opt/pixelfed && docker compose up -d
# 第 3 步：验证生效
docker compose exec pixelfed php artisan config:show pixelfed | grep max_album_length

# 清除单键（以 pixelfed.open_registration 为例）
docker compose exec pixelfed php artisan tinker --execute='$r=\App\Models\ConfigCache::where("k","pixelfed.open_registration")->first(); if($r)$r->delete(); \Illuminate\Support\Facades\Cache::forget("config_cache:_v0-key:pixelfed.open_registration");'
# 重建配置/路由/视图缓存
docker compose exec pixelfed sh -c 'php artisan optimize:clear && php artisan optimize'

docker compose exec pixelfed php artisan config:show app | grep -E "env|debug"

  env ................................................................ production
  debug ..................................................................... false

curl -s -o /dev/null -w '%{http_code}\n' http://192.168.146.128:8135/register

404

curl -s http://192.168.146.128:8135/register | grep -oE '<title>[^<]*</title>'

<title>注册 · Pixelfed</title>

curl -s -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8135/login
curl -s -o /dev/null -w '%{http_code}\n' http://192.168.146.128:8135/login

404
200

<form method="POST" action="https://192.168.146.128:8135/login">

<form method="POST" action="http://192.168.146.128:8135/login">

set-cookie: pxfs=...; path=/; httponly; samesite=lax; secure

curl -s -b cookies.txt -H "X-XSRF-TOKEN: $XSRF" -H 'Content-Type: application/json' \
  -X POST http://192.168.146.128:8135/api/compose/v0/publish \
  -d '{"caption":"（600 个『长』字）","media":[{"id":5,"cursor":0}],"visibility":"public"}'

{"message":"The caption field must not be greater than 500 characters.","errors":{"caption":["The caption field must not be greater than 500 characters."]}}

docker compose exec pixelfed php artisan tinker --execute='$s=\App\Models\Status::where("caption","like","%相册上限实测%")->first(); echo "status_id=".$s->id." media_count=".\App\Models\Media::where("status_id",$s->id)->count(); echo " orphan=".join(",", \App\Models\Media::whereNull("status_id")->pluck("id")->all());'

status_id=1020378795510095814 media_count=4 orphan=5,10

docker compose exec pixelfed php artisan config:show pixelfed | grep -E "image_driver|image_quality"

  image_driver ............................................................ vips
  image_quality ........................................................... 80

{"error":""}

{"code":200,"msg":"Successfully added","media_id":"1020379318853533699","media_type":"photo"}

docker compose exec pixelfed php artisan config:show database | grep -A2 "mysql ⇁"

  connections ⇁ mysql ⇁ host .............................................. db
  connections ⇁ mysql ⇁ database .................................... pixelfed

ERROR 3763 (HY000) at line 1: Expression of generated column 'key_hash' contains a disallowed function: `md5`.

docker compose exec pixelfed php artisan horizon:status

INFO  Horizon is running.

docker compose exec pixelfed php artisan queue:failed

INFO  No failed queue jobs found.

docker compose exec pixelfed php artisan app:federation

================================================================
CONFIG
================================================================
  ✓ APP_ENV is production
  ✗ ActivityPub is disabled  env=false admin setting=false
      ↳ Set ACTIVITY_PUB=true, then run php artisan config:cache.
  ! Inbox (AP_INBOX) is disabled
  ! Outbox (AP_OUTBOX) is disabled
  ! Shared inbox (AP_SHAREDINBOX) is disabled
  ! Remote follow (AP_REMOTE_FOLLOW) is disabled
  ✓ WebFinger enabled
  ✓ NodeInfo enabled
  · Authorized fetch  disabled (env=false)
  · Followers sync (FEP-8fcf)  enabled
  · Delivery tuning  timeout=30s concurrency=10 failure_threshold=5 max_backoff=604800s
  ✗ APP_URL is not https  http://192.168.146.128:8135
      ↳ Actor ids are built from APP_URL and Pixelfed only accepts https ActivityPub URLs.
  ✓ APP_URL host matches APP_DOMAIN  192.168.146.128
  ✓ Cached config is newer than .env
  · Cache store  redis
  ✓ No pending migrations

================================================================
INSTANCE ACTOR
================================================================
  ✓ Instance actor exists  http://192.168.146.128:8135/i/actor
  ✓ Instance actor keypair is valid  2048 bit RSA, public key derives from private key
  ✓ Cached private key matches the database
  ✓ Cached public key matches the database
  · Cached actor document  not cached yet

================================================================
LOCAL ENDPOINTS (outside-in)
================================================================
  ✓ host-meta  points at /.well-known/webfinger
  ✓ WebFinger acct:admin@192.168.146.128  self link is http://192.168.146.128:8135/users/admin
  ✓ NodeInfo discovery  http://192.168.146.128:8135/api/nodeinfo/2.0.json
  ✓ NodeInfo document  pixelfed 0.15.2, protocols: activitypub
  ✓ Instance actor document  id, inbox and publicKeyPem all match
  ✗ Actor @admin as application/activity+json  HTTP 302, expected 200
      ↳ Redirects to http://192.168.146.128:8135/admin. Remote servers do not reliably follow redirects here, APP_URL should be the canonical origin.
  ✗ Actor @admin as application/ld+json  HTTP 302, expected 200
      ↳ Redirects to http://192.168.146.128:8135/admin. Remote servers do not reliably follow redirects here, APP_URL should be the canonical origin.
  ✓ Shared inbox route reaches Laravel  GET /f/inbox returned 405 as expected

================================================================
HTTP SIGNATURES
================================================================
  ✓ All active local profiles have a keypair  2 profiles
  ✓ POST signature round trip as @admin  signed headers: (request-target) host date digest content-type user-agent
  ✓ GET signature round trip as the instance actor  signed headers: (request-target) host date accept

================================================================
QUEUES
================================================================
  · Queue connection  redis (redis driver)
  ✓ Horizon is running  1 master supervisor(s)

+---------+--------+---------+------+-------------------------------------------------+
| Queue   | Worker | Pending | Wait | Carries                                         |
+---------+--------+---------+------+-------------------------------------------------+
| default | yes    | 0       | 0s   | outbound status delivery                        |
| high    | yes    | 0       | 0s   | user inbox activities                           |
| shared  | yes    | 0       | 0s   | shared inbox activities                         |
| follow  | yes    | 0       | 0s   | inbound and outbound follows                    |
| inbox   | yes    | 0       | 0s   | inbound actor deletes                           |
| delete  | yes    | 0       | 0s   | inbound deletes                                 |
| story   | yes    | 0       | 0s   | story deletes                                   |
| feed    | yes    | 0       | 0s   | likes, home feed inserts after ingest           |
| low     | yes    | 0       | 0s   | shares, signing actor discovery, remote avatars |
| move    | yes    | 0       | 0s   | account migration                               |
+---------+--------+---------+------+-------------------------------------------------+
  ✓ No failed federation jobs in the last 24h  0 failed jobs scanned

================================================================
DELIVERY HEALTH
================================================================
  · Known instances  0 total, 0 banned
  ✓ No hosts with delivery failures
  · Banned domain cache  not cached yet
  · Audience of @admin  0 inboxes on 0 hosts, 0 host(s) currently skipped

================================================================
ENVIRONMENT
================================================================
  · PHP  8.5.12 (cli)
  ✓ Required PHP extensions and dns_get_record() are available
  ✗ Own domain does not pass the public IP check from this server  192.168.146.128 -> 192.168.146.128
      ↳ Helpers::validateLocalUrl() fails here, so inbound Follows, replies (inReplyTo) and Undos that reference local URLs are dropped. One private or reserved record (split-horizon DNS, internal resolver, ULA AAAA) is enough. Negative results are cached for 5 minutes.
  ✗ Outbound HTTPS to https://pixelfed.org failed  ConnectionException: cURL error 28: Connection timed out after 5001 milliseconds (see https://curl.se/libcurl/c/libcurl-errors.html) for https://pixelfed.org
      ↳ If every outbound request fails, look at the egress firewall, DNS and the CA bundle (curl.cainfo).

================================================================
SUMMARY
================================================================
  23 ok, 4 warning(s), 6 failure(s), 0 skipped

FAILURES:
  ✗ [config] ActivityPub is disabled
  ✗ [config] APP_URL is not https
  ✗ [endpoints] Actor @admin as application/activity+json
  ✗ [endpoints] Actor @admin as application/ld+json
  ✗ [env] Own domain does not pass the public IP check from this server
  ✗ [env] Outbound HTTPS to https://pixelfed.org failed

WARNINGS:
  ! [config] Inbox (AP_INBOX) is disabled
  ! [config] Outbox (AP_OUTBOX) is disabled
  ! [config] Shared inbox (AP_SHAREDINBOX) is disabled
  ! [config] Remote follow (AP_REMOTE_FOLLOW) is disabled

# ── 基础 ──
APP_NAME="社区名称"
APP_ENV="production"
APP_DEBUG="false"
APP_LOCALE="zh-CN"                        # 界面语言
APP_KEY=${PIXELFED_APP_KEY}               # 由 php artisan key:generate --show 生成后注入（见 5.1 节实测输出）

# ── 地址（公网域名 + 反代 TLS 场景）──
APP_URL="https://pixelfed.example.com"
APP_DOMAIN="pixelfed.example.com"
ADMIN_DOMAIN="pixelfed.example.com"
TRUST_PROXIES="*"                         # 前置 Nginx/Caddy 时保留
FORCE_HTTPS_URLS="true"                   # 有 TLS 时保持默认
SESSION_SECURE_COOKIE="true"              # 有 TLS 时保持默认

# ── 准入治理 ──
OPEN_REGISTRATION="false"                 # 人工/邀请制
ENFORCE_EMAIL_VERIFICATION="true"         # 配合真实 SMTP
PF_MAX_USERS="200"
OAUTH_ENABLED="true"

# ── 媒体 ──
IMAGE_DRIVER=vips
PF_OPTIMIZE_IMAGES="true"
IMAGE_QUALITY="85"
MAX_PHOTO_SIZE="15000"
MAX_CAPTION_LENGTH="1000"
MAX_ALBUM_LENGTH="6"
STORIES_ENABLED="true"

# ── 数据层 ──
DB_CONNECTION="mysql"
DB_HOST="db"
DB_DATABASE="pixelfed"
DB_USERNAME="pixelfed"
DB_PASSWORD="q1w2e3r4"                    # 演示口令，生产环境务必更换
DB_ROOT_PASSWORD="q1w2e3r4"               # 编排健康检查引用，生产环境务必更换
REDIS_HOST="redis"

# ── 会话/队列 ──
SESSION_DRIVER="database"
CACHE_STORE="redis"
QUEUE_DRIVER="redis"

# ── 联邦（公网 HTTPS 就绪后再开）──
ACTIVITY_PUB="true"
AP_REMOTE_FOLLOW="true"
AP_INBOX="true"
AP_OUTBOX="true"
AP_SHAREDINBOX="true"

# ── 邮件（真实 SMTP）──
MAIL_DRIVER=smtp
MAIL_HOST=smtp.example.com
MAIL_PORT=587
MAIL_USERNAME=${SMTP_USERNAME}            # 由邮箱服务商获取后注入
MAIL_PASSWORD=${SMTP_PASSWORD}
MAIL_ENCRYPTION=tls
MAIL_FROM_ADDRESS="pixelfed@example.com"
MAIL_FROM_NAME="Pixelfed"