Turnkey hosting for the distributable app: both web containers now mount deploy/download/ read-only and nginx serves it at /download/<file> (autoindex off, no-store). Drop dist/apess-onboard.zip into deploy/download/ and students fetch https://apess.redclaw.dev/download/apess-onboard.zip → App Lab "Import an app" → Run. No image rebuild to update the artifact. The zip carries a baked cloud token, so deploy/download/*.zip is gitignored and the URL should be treated as a secret (workshop network / access-gated, not a public link). Co-Authored-By: Claude Opus 4.8 <[email protected]>
27 lines
923 B
Markdown
27 lines
923 B
Markdown
# Download directory
|
|
|
|
Drop distributable artifacts here — they're served at `/download/<file>` by both
|
|
the prod (`deploy/docker-compose.yml`) and LAN (`deploy/lan/`) web containers via a
|
|
read-only volume mount. No image rebuild needed; the container picks up new files
|
|
immediately.
|
|
|
|
## The App Lab onboarding app
|
|
|
|
```sh
|
|
# 1. build the zip (bakes in the cloud token)
|
|
export ANTHROPIC_OAUTH_TOKEN=sk-ant-oat01-…
|
|
./deploy/uno-q/package-onboard-app.sh
|
|
|
|
# 2. place it here for download
|
|
cp deploy/uno-q/dist/apess-onboard.zip deploy/download/
|
|
|
|
# 3. students fetch it (then App Lab → "Import an app" → Run)
|
|
# https://apess.redclaw.dev/download/apess-onboard.zip
|
|
```
|
|
|
|
## ⚠️ Secret
|
|
|
|
`apess-onboard.zip` contains a **baked cloud token**. Never commit it (this dir's
|
|
`*.zip` is gitignored). Treat the download URL as a secret — serve it on the
|
|
workshop network, or behind the workshop's access, not as a public link.
|