feat: 26&timeout&keystore

config/queue.php

@@ -73,6 +73,18 @@ return [
             'after_commit' => false,
         ],
 
+        // CPU-heavy keystore decryption. Separate from the default queue so a
+        // long PBKDF2 run cannot be re-delivered while it is still working
+        // (retry_after must stay above the job timeout).
+        'keystore' => [
+            'driver' => 'redis',
+            'connection' => env('REDIS_QUEUE_CONNECTION', 'default'),
+            'queue' => 'keystore',
+            'retry_after' => (int) env('KEYSTORE_QUEUE_RETRY_AFTER', 360),
+            'block_for' => null,
+            'after_commit' => false,
+        ],
+
         'deferred' => [
             'driver' => 'deferred',
         ],