meta-core claims model: pin meta-core 2.0.1, meta-read 1.4.1, meta-watch 1.1.0, meta-search 1.3.2, meta-share 2.7.0, gateway 1.1.1, meta-sort 1.1.1, plugins 1.1.0; signing keys + db-cache backup exclude

Apps/MetaGatewayShared/docker-compose.yml

@@ -33,7 +33,7 @@ services:
   # co-located metashare-app then seeds the resolved CIDs.
   # ---------------------------------------------------------------------------
   metagateway-app:
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-gateway:1.0.43
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-gateway:1.1.1
     container_name: metagateway-app
     hostname: metagateway-app
     restart: unless-stopped
@@ -55,6 +55,9 @@ services:
     volumes:
       # gateway-config.json (source definitions, feeder URLs) + dispatcher state.
       - ${DATA_ROOT:-/DATA}/AppData/metagateway/state:/data/meta-gateway:rw
+      # Claim-signing key (meta-core 2.0.0 claims model) for the records the
+      # dispatcher writes to metacore-app. Config — backed up.
+      - ${DATA_ROOT:-/DATA}/AppData/metagateway/keys:/keys:rw
     environment:
       # Advertised verbatim in this peer's libp2p identify `agent_version`
       # (`baseUrl=...`) and used for NOTHING else in-process — see
@@ -72,6 +75,8 @@ services:
       # carve-out in the Caddy labels below is what makes this URL answerable.
       META_GATEWAY_BASE_URL: "https://metagateway-${APP_DOMAIN}"
       META_GATEWAY_PEER_ID: "metagateway"
+      # Own claim-signing key; generated on first boot if missing.
+      METAMESH_SIGNING_KEY_FILE: "/keys/metagateway-app.key"
       # --- cross-node discoverability (added 2026-08-26) ---------------------
       # WITHOUT META_GATEWAY_PUBLIC_ADDR meta-gateway starts in local/mDNS-only
       # mode: it loads NO kad bootstraps, sets kad_provide_enabled=false, and so
@@ -193,7 +198,7 @@ services:
       BACKEND_HOST: "metagateway-app"
       BACKEND_PORT: "3000"
       LISTEN_PORT: "80"
-      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io"
+      REDIRECT_HOST_SUFFIXES: "${APP_HOST_SUFFIXES:-${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io}"
     depends_on:
       - metagateway-app
     labels:
@@ -356,6 +361,9 @@ x-compose-app:
     - path: /DATA/AppData/metagateway/state
       user: $PUID
       group: $PGID
+    - path: /DATA/AppData/metagateway/keys
+      user: $PUID
+      group: $PGID
     - path: /DATA/AppData/metagateway/card
       user: 10001
       group: 999