meta-core claims model: pin meta-core 2.0.1, meta-read 1.4.1, meta-watch 1.1.0, meta-search 1.3.2, meta-share 2.7.0, gateway 1.1.1, meta-sort 1.1.1, plugins 1.1.0; signing keys + db-cache backup exclude
This commit is contained in:
Worph
@@ -35,7 +35,7 @@ services:
|
||||
# ===========================================================================
|
||||
metagateway-core:
|
||||
# 1.0.1 carries the new meta-core API (records cids/ set, identity).
|
||||
image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-core:1.0.24
|
||||
image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-core:2.0.1
|
||||
container_name: metagateway-core
|
||||
# Hard RAM cap, swap disabled (memswap_limit == mem_limit) → OOM
|
||||
# instead of swap. Mirrors the dev sub-stack limits.
|
||||
@@ -50,6 +50,8 @@ services:
|
||||
- 9000
|
||||
volumes:
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metagateway/metacore:/meta-core:rw
|
||||
# (meta-core 2.0.0 keeps its rebuildable index cache at
|
||||
# /meta-core/db-cache/cache.db inside this bind — excluded from backups.)
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metagateway/files:/files:rw
|
||||
environment:
|
||||
- BASE_URL=http://metagateway-core:9000
|
||||
@@ -81,7 +83,7 @@ services:
|
||||
# MetaShare app's `metashare-<tier>` hostnames, which on a shared `pcs`
|
||||
# would be ANOTHER hull's plugins writing to another /data).
|
||||
# - 3000 HTTP API - 3001 plugin callback API (internal only)
|
||||
image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-share:2.6.4
|
||||
image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-share:2.7.0
|
||||
container_name: metagateway-share
|
||||
# The swarm and blockstore moved to the ipfs plugin, so the hull needs far
|
||||
# less than the monolith did.
|
||||
@@ -103,6 +105,9 @@ services:
|
||||
# hull's; ipfs/blocks.redb is the ipfs plugin's corner of the SAME folder
|
||||
# (layout unchanged from 1.0.x, so an existing cache carries over).
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metagateway/share-data:/data:rw
|
||||
# Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
|
||||
# service in this stack. Config — backed up, NOT in backup.exclude.
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metagateway/keys:/keys:rw
|
||||
environment:
|
||||
META_CORE_URL: "http://metagateway-core:9000"
|
||||
BASE_URL: "http://metagateway-share:3000"
|
||||
@@ -110,6 +115,8 @@ services:
|
||||
META_SHARE_PLUGIN_IPFS_URL: "http://metagateway-share-ipfs:3000"
|
||||
META_SHARE_PLUGIN_TORRENT_URL: "off"
|
||||
META_SHARE_PLUGIN_NZB_URL: "off"
|
||||
# Own claim-signing key; generated on first boot if missing.
|
||||
METAMESH_SIGNING_KEY_FILE: "/keys/metagateway-share.key"
|
||||
TZ: "$TZ"
|
||||
depends_on:
|
||||
metagateway-core:
|
||||
@@ -184,8 +191,12 @@ services:
|
||||
# P2P listen/announce so it's discoverable + dialable off-host + the
|
||||
# 2026-07 discovery/filters fixes that make the meta-search fan-out
|
||||
# actually route `fileType:video` queries here.
|
||||
image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-gateway:1.0.43
|
||||
image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-gateway:1.1.1
|
||||
container_name: metagateway-app
|
||||
# Run as the PUID that Maison creates the app folders with (as the Shared
|
||||
# variant does). The image default user (uid 10001) cannot write them on a
|
||||
# fresh install: "create ipfs dir … Permission denied".
|
||||
user: "1000:1000"
|
||||
# Hard RAM cap, swap disabled (memswap_limit == mem_limit) → OOM
|
||||
# instead of swap. Mirrors the dev sub-stack limits.
|
||||
# 1g -> 2g (2026-09-30): the DHT-joined dispatcher runs at ~1.2 GiB on
|
||||
@@ -207,6 +218,9 @@ services:
|
||||
# gateway-config.json (feeders map) + gateway-enabled.json, written by
|
||||
# pre-install-cmd. Runtime redb caches also live here.
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metagateway/state:/data/meta-gateway:rw
|
||||
# Claim-signing keys (meta-core 2.0.0 claims model), one file per writer
|
||||
# service in this stack. Config — backed up, NOT in backup.exclude.
|
||||
- ${DATA_ROOT:-/DATA}/AppData/metagateway/keys:/keys:rw
|
||||
environment:
|
||||
# NOTE: `meta_core_url` (and `meta_share_url`) live in gateway-config.json
|
||||
# since v1.0.12 — no longer read from env. The pre-install-cmd below seeds
|
||||
@@ -215,6 +229,9 @@ services:
|
||||
# libp2p identify agent_version) — without it meta-search can't HTTP-fetch
|
||||
# /api/gateway/plugins on this gateway to populate its routing table.
|
||||
META_GATEWAY_PEER_ID: "metagateway"
|
||||
# Own claim-signing key for the records it auto-stores in its meta-core;
|
||||
# generated on first boot if missing.
|
||||
METAMESH_SIGNING_KEY_FILE: "/keys/metagateway-app.key"
|
||||
# MUST be resolvable BY A REMOTE PEER — it is advertised verbatim in the
|
||||
# identify `baseUrl=` token and used for nothing else in-process. A
|
||||
# docker-internal name here (the old `http://metagateway-app:3000`) makes
|
||||
@@ -306,7 +323,7 @@ services:
|
||||
BACKEND_HOST: "metagateway-app"
|
||||
BACKEND_PORT: "3000"
|
||||
LISTEN_PORT: "80"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_HOST_SUFFIXES:-${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io}"
|
||||
depends_on:
|
||||
- metagateway-app
|
||||
labels:
|
||||
@@ -385,7 +402,7 @@ services:
|
||||
expose: ["80"]
|
||||
environment:
|
||||
OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_HOST_SUFFIXES:-${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io}"
|
||||
BACKEND_HOST: "metagateway-core"
|
||||
BACKEND_PORT: "80"
|
||||
LISTEN_PORT: "80"
|
||||
@@ -414,7 +431,7 @@ services:
|
||||
expose: ["80"]
|
||||
environment:
|
||||
OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io"
|
||||
REDIRECT_HOST_SUFFIXES: "${APP_HOST_SUFFIXES:-${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io}"
|
||||
BACKEND_HOST: "metagateway-share"
|
||||
BACKEND_PORT: "3000"
|
||||
LISTEN_PORT: "80"
|
||||
@@ -609,6 +626,11 @@ x-compose-app:
|
||||
- path: /DATA/AppData/metagateway/metacore
|
||||
user: $PUID
|
||||
group: $PGID
|
||||
# meta-core 2.0.0 rebuildable index cache (default
|
||||
# /meta-core/db-cache/cache.db). Excluded from backups below.
|
||||
- path: /DATA/AppData/metagateway/metacore/db-cache
|
||||
user: $PUID
|
||||
group: $PGID
|
||||
- path: /DATA/AppData/metagateway/files
|
||||
user: $PUID
|
||||
group: $PGID
|
||||
@@ -624,6 +646,14 @@ x-compose-app:
|
||||
- path: /DATA/AppData/metagateway/share-ipfs-state
|
||||
user: $PUID
|
||||
group: $PGID
|
||||
- path: /DATA/AppData/metagateway/keys
|
||||
user: $PUID
|
||||
group: $PGID
|
||||
# Derived data only: meta-core rebuilds its index cache from the truth file
|
||||
# (metacore/db/meta-core.db, which IS backed up). keys/ stays backed up.
|
||||
backup:
|
||||
exclude:
|
||||
- metacore/db-cache/
|
||||
# Same string as the caddy_0 label, so the tile link and the route agree.
|
||||
webui-host: metagateway-${domain}
|
||||
webui-path: "/"
|
||||
|
||||
Reference in New Issue
Block a user