fix(cluster): make raft readiness timeout configurable via raft_ready_timeout_ms

B3 (2026-08-26): RAFT_READY_TIMEOUT=30s hardcoded vs replay of a large
raft log (>150k entries) exceeding 30s — ReadyGate Failed, process alive
but port dead. New [server] raft_ready_timeout_ms config key (default
30_000 keeps existing behaviour).

Author: EnRaiha

nodedb/src/bootstrap/cluster_ready.rs

@@ -33,6 +33,7 @@ pub async fn await_cluster_ready(
     raft_ready_rx: Option<tokio::sync::watch::Receiver<bool>>,
     data_plane_replay_done: Vec<tokio::sync::oneshot::Receiver<()>>,
     gates: ClusterReadyGates,
+    raft_ready_timeout: std::time::Duration,
 ) -> anyhow::Result<()> {
     let ClusterReadyGates {
         raft_gate,
@@ -51,8 +52,7 @@ pub async fn await_cluster_ready(
     // `metadata propose: not leader` because election had not yet
     // completed.
     if let Some(mut ready_rx) = raft_ready_rx {
-        const RAFT_READY_TIMEOUT: Duration = Duration::from_secs(30);
-        match tokio::time::timeout(RAFT_READY_TIMEOUT, ready_rx.wait_for(|v| *v)).await {
+        match tokio::time::timeout(raft_ready_timeout, ready_rx.wait_for(|v| *v)).await {
             Ok(Ok(_)) => {
                 info!("metadata raft group ready — opening client listeners");
             }
@@ -64,10 +64,10 @@ pub async fn await_cluster_ready(
             }
             Err(_) => {
                 raft_gate.fail(format!(
-                    "raft readiness timeout after {RAFT_READY_TIMEOUT:?}"
+                    "raft readiness timeout after {raft_ready_timeout:?}"
                 ));
                 return Err(anyhow::anyhow!(
-                    "raft readiness timeout after {RAFT_READY_TIMEOUT:?} — \
+                    "raft readiness timeout after {raft_ready_timeout:?} — \
                      metadata group failed to apply first entry"
                 ));
             }

nodedb/src/config/server/section.rs

@@ -71,6 +71,13 @@ pub struct ServerSection {
     #[serde(default)]
     pub log_format: LogFormat,
 
+    /// Boot-time raft metadata group readiness timeout in milliseconds.
+    /// Default 30_000 (30s). Replay of a large raft log (long write bursts,
+    /// big migrations) can exceed 30s — raise this via `raft_ready_timeout_ms`.
+    /// Script/config set: `[server] raft_ready_timeout_ms = 300000`.
+    #[serde(default)]
+    pub raft_ready_timeout_ms: Option<u64>,
+
     /// Per-listener TLS configuration. Lives under `[server.tls]` because
     /// it directly modifies the listeners declared in `[server.ports]`
     /// (per-protocol toggles + cert paths). When absent, every listener
@@ -126,6 +133,7 @@ impl Default for ServerSection {
             memory_limit: default_memory_limit(),
             max_connections: default_max_connections(),
             log_format: LogFormat::Text,
+            raft_ready_timeout_ms: None,
             tls: None,
             single_node_calvin: default_single_node_calvin(),
             native_crash_dumps: false,

nodedb/src/main.rs

@@ -243,6 +243,9 @@ async fn server_main() -> anyhow::Result<()> {
             health_loop_gate,
             gateway_enable_gate,
         },
+        std::time::Duration::from_millis(
+            config.server.raft_ready_timeout_ms.unwrap_or(30_000),
+        ),
     )
     .await?;