A private fediverse on the workstation: PrivaPub against a real GoToSocial

tools/pasture/run.sh starts PrivaPub, GoToSocial and Mongo on one podman network behind Caddy's internal CA, and
interop.sh drives both through their own client APIs: follows (one to a locked account), posts, CW, replies, likes,
boosts, DMs, edits, deletes and unfollow. All 25 checks pass, three fresh runs in a row.

- Federation:AcceptAnyCertificate joins the two test-network switches; startup refuses all three in Production.
- WebFinger falls back to http only when AllowPlainHttp is on.
- A bootstrap logger, so a failure before the host is built is no longer silent.
- P4 is ticked in the roadmap, with what has not been run live (Lemmy, a Mastodon circle member).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012CzABvBkbcFqoHdmi8b9WB

tools/pasture/appsettings.Pasture.json

@@ -0,0 +1,33 @@
+{
+	"MongoSettings": {
+		"Database": "PrivaPub",
+		"LogsDatabase": "logs",
+		"ConnectionString": "mongodb://mongo:27017"
+	},
+	"AppConfiguration": {
+		"Version": "0.0.0",
+		"MaxAllowedUploadFiles": 3,
+		"MaxAllowedFileSize": 2097152,
+		"SupportedLanguages": [ "en" ],
+		"BackendBaseAddress": "https://privapub.test",
+		"FrontendBaseAddress": "https://privapub.test",
+		"HashingOptions": { "Iterations": 10101 },
+		"Jwt": {
+			"Key": "pasture-only-key-not-a-secret-pasture-only-key-not-a-secret-0123456789",
+			"Issuer": "http://privapub.test",
+			"Audience": "http://privapub.test",
+			"HoursTimeout": 24
+		}
+	},
+	"Federation": {
+		"AllowPrivateNetworks": true,
+		"AllowPlainHttp": true,
+		"AcceptAnyCertificate": true
+	},
+	"Media": { "Root": "/tmp/privapub-media" },
+	"Kestrel": { "Endpoints": { "Http": { "Url": "http://0.0.0.0:80", "Protocols": "Http1AndHttp2" } } },
+	"Serilog": {
+		"MinimumLevel": { "Default": "Information", "Override": { "Microsoft": "Warning", "System": "Warning" } },
+		"WriteTo": [ { "Name": "Console" } ]
+	}
+}