add endpoint connectivity diagnostic

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Dockerfile

@@ -1,22 +1,20 @@
-# Postiz - Custom image with cloudflared for HF Spaces
-# Uses pre-built image from Docker Hub (includes cloudflared binary)
+# Postiz - Custom image for HF Spaces
 FROM toykitpostiz/postiz:tunnel
 
 USER root
 
-# Replace nginx config (port 7860 only, no gRPC block)
 COPY var/docker/nginx.conf /etc/nginx/nginx.conf
 
-# Temporal mTLS client certificates
 COPY var/docker/temporal/temporal-mtls/client.crt /etc/nginx/ssl/client.crt
 COPY var/docker/temporal/temporal-mtls/client.key /etc/nginx/ssl/client.key
 COPY var/docker/temporal/temporal-mtls/ca.crt /etc/nginx/ssl/ca.crt
 RUN chmod 600 /etc/nginx/ssl/client.key
 
-# Ensure /data dir exists for HF Spaces persistence
 RUN mkdir -p /data
 
-# Startup script: cloudflared proxy + Temporal mTLS patch + original entrypoint
+COPY var/docker/endpoint-check.sh /app/endpoint-check.sh
+RUN chmod +x /app/endpoint-check.sh
+
 COPY var/docker/start.sh /app/start.sh
 RUN chmod +x /app/start.sh
 

var/docker/endpoint-check.sh

@@ -0,0 +1,41 @@
+#!/bin/sh
+# Endpoint connectivity check - tests external API reachability from this environment
+# Results are logged for diagnostic purposes
+
+echo "=== Endpoint Connectivity Check ==="
+
+ENDPOINTS="
+api.x.com
+api.linkedin.com
+oauth.reddit.com
+open.tiktokapis.com
+api.pinterest.com
+slack.com
+api.twitch.tv
+api.kick.com
+bsky.social
+api.dribbble.com
+api.medium.com
+api.vk.com
+api.whop.com
+api2.skool.com
+mastodon.social
+warpcast.com
+primal.net
+dev.to
+mewe.com
+www.moltbook.com
+"
+
+for ep in $ENDPOINTS; do
+  result=$(curl -s -o /dev/null -w "%{http_code}:%{time_total}" --max-time 10 "https://$ep" 2>/dev/null || echo "000:timeout")
+  code=$(echo "$result" | cut -d: -f1)
+  time=$(echo "$result" | cut -d: -f2)
+  if [ "$code" = "000" ]; then
+    echo "[endpoint-check] $ep -> UNREACHABLE ($time)"
+  else
+    echo "[endpoint-check] $ep -> OK ($code, ${time}s)"
+  fi
+done
+
+echo "=== Check Complete ==="

var/docker/start.sh

@@ -3,6 +3,9 @@ set -e
 
 echo "=== Postiz HF Space Startup ==="
 
+# Run endpoint connectivity check (diagnostic)
+bash /app/endpoint-check.sh || true
+
 # Start cloudflared access tcp proxy for PostgreSQL (if configured)
 if [ -n "$TUNNEL_SERVICE_TOKEN_ID" ] && [ -n "$CF_TUNNEL_HOSTNAME" ]; then
   echo "Starting cloudflared access tcp proxy -> $CF_TUNNEL_HOSTNAME (PG)"