meta-core claims model: pin meta-core 2.0.1, meta-read 1.4.1, meta-watch 1.1.0, meta-search 1.3.2, meta-share 2.7.0, gateway 1.1.1, meta-sort 1.1.1, plugins 1.1.0; signing keys + db-cache backup exclude

Apps/MetaFeederUsenet/docker-compose.yml

@@ -101,7 +101,7 @@ services:
   # images don't ship one (curl absent).
   # ---------------------------------------------------------------------------
   metafeederusenet-filename-parser:
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-filename-parser:1.0.5
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-filename-parser:1.1.0
     cpu_shares: 30
     container_name: metafeederusenet-filename-parser
     mem_limit: 256m
@@ -115,11 +115,17 @@ services:
       # (meta-sort's Scan card) sees it as bound elsewhere, never addable.
       BEACON_BINDS: "metafeederusenet-feeder"
       EMIT_TITLE_TAGS: "true"
+      # Own claim-signing key (enrichment claims); generated on first boot if missing.
+      METAMESH_SIGNING_KEY_FILE: "/keys/metafeederusenet-filename-parser.key"
+    volumes:
+      # Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
+      # service in this stack. Config — backed up, NOT in backup.exclude.
+      - ${DATA_ROOT:-/DATA}/AppData/metafeederusenet/keys:/keys:rw
     networks:
       - metafeederusenet
 
   metafeederusenet-tmdb:
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-tmdb:1.0.5
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/metamesh-plugin-tmdb:1.1.0
     cpu_shares: 30
     container_name: metafeederusenet-tmdb
     mem_limit: 384m
@@ -137,8 +143,13 @@ services:
       # the sibling feeder apps' identical note: the published image needs
       # this, unlike the source build the dev stack runs).
       WEBDAV_URL: "http://metacore-app:9000/webdav"
+      # Own claim-signing key (enrichment claims); generated on first boot if missing.
+      METAMESH_SIGNING_KEY_FILE: "/keys/metafeederusenet-tmdb.key"
     volumes:
       - ${DATA_ROOT:-/DATA}/AppData/metafeederusenet/tmdb-cache:/cache
+      # Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
+      # service in this stack. Config — backed up, NOT in backup.exclude.
+      - ${DATA_ROOT:-/DATA}/AppData/metafeederusenet/keys:/keys:rw
     networks:
       - metafeederusenet
       - pcs
@@ -252,6 +263,9 @@ x-compose-app:
     - path: /DATA/AppData/metafeederusenet/tmdb-cache
       user: $PUID
       group: $PGID
+    - path: /DATA/AppData/metafeederusenet/keys
+      user: $PUID
+      group: $PGID
   # No web UI: Maison files it under Services. Configured from MetaGateway.
   # Shown from the tile menu.
   tips: