up

etc/feedser.yaml.sample

@@ -59,7 +59,27 @@ authority:
   clientSecretFile: ""
   clientScopes:
     - "feedser.jobs.trigger"
+  resilience:
+    # Enable deterministic retry/backoff when Authority is briefly unavailable.
+    enableRetries: true
+    retryDelays:
+      - "00:00:01"
+      - "00:00:02"
+      - "00:00:05"
+    # Allow stale discovery/JWKS responses when Authority is offline (extend tolerance as needed for air-gapped mirrors).
+    allowOfflineCacheFallback: true
+    offlineCacheTolerance: "00:10:00"
   # Networks allowed to bypass authentication (loopback by default for on-host cron jobs).
   bypassNetworks:
     - "127.0.0.1/32"
     - "::1/128"
+
+sources:
+  ghsa:
+    apiToken: "${GITHUB_PAT}"
+    pageSize: 50
+    maxPagesPerFetch: 5
+    requestDelay: "00:00:00.200"
+    failureBackoff: "00:05:00"
+    rateLimitWarningThreshold: 500
+    secondaryRateLimitBackoff: "00:02:00"