meta-core claims model: pin meta-core 2.0.1, meta-read 1.4.1, meta-watch 1.1.0, meta-search 1.3.2, meta-share 2.7.0, gateway 1.1.1, meta-sort 1.1.1, plugins 1.1.0; signing keys + db-cache backup exclude

Apps/MetaShare/docker-compose.yml

@@ -13,7 +13,7 @@ services:
   #  - 3000  HTTP API + dashboard (proxied through the hash-lock + Caddy)
   #  - 3001  plugin callback API — internal only, never published
   metashare-app:
-    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-share:2.6.4
+    image: ipcr-watch.nsl.sh/ipns/metadec.eth/metadec.eth/meta-share:2.7.0
     container_name: metashare-app
     # Hard RAM cap, swap disabled (memswap_limit == mem_limit) → OOM instead of
     # swap. The swarm, blockstore and torrent session moved to the plugins, so
@@ -42,6 +42,10 @@ services:
       # host folder, which they mount too — so the tmp/ → cache/ rename(2) stays
       # atomic. Layout unchanged from the monolith: existing caches carry over.
       - ${DATA_ROOT:-/DATA}/AppData/metashare/data:/data:rw
+      # Claim-signing key (meta-core 2.0.0 claims model): the hull's identity on
+      # the claims it writes (content links, archive marks, pointer resolves).
+      # Config — backed up, deliberately NOT in backup.exclude.
+      - ${DATA_ROOT:-/DATA}/AppData/metashare/keys:/keys:rw
 
     environment:
       # Service registration / neighbour announce.
@@ -51,6 +55,8 @@ services:
       # Inter-peer fetch URL, announced in identify by the ipfs plugin. Same as
       # BASE_URL in prod (other peers fetch via the public Caddy URL).
       - INTERNAL_BASE_URL=https://metashare-$APP_DOMAIN
+      # Own claim-signing key; generated on first boot if missing.
+      - METAMESH_SIGNING_KEY_FILE=/keys/metashare-app.key
       - TZ=$TZ
 
     user: 0:0
@@ -86,7 +92,7 @@ services:
       BACKEND_HOST: "metashare-app"
       BACKEND_PORT: "3000"
       LISTEN_PORT: "80"
-      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io"
+      REDIRECT_HOST_SUFFIXES: "${APP_HOST_SUFFIXES:-${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.${APP_IP_ZONE},${APP_PUBLIC_IP_DASH}.sslip.io}"
 
     depends_on:
       - metashare-app
@@ -276,6 +282,9 @@ x-compose-app:
     - path: /DATA/AppData/metashare/data
       user: $PUID
       group: $PGID
+    - path: /DATA/AppData/metashare/keys
+      user: $PUID
+      group: $PGID
   # Fetched content only: everything under these can be pulled again off the
   # swarm/NNTP/HTTP (meta-share reclaim.rs, "cache means cache"). They are ~94G
   # on a busy peer, so without this every backup — and Maison's pre-update