dank/serverAppConfigs
1
0
Fork 0
Code Issues 6 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

docs(homepage): record the @data allowlist law for new assets

Browse Source
This commit is contained in:
Frank
2026-10-07 23:41:58 -07:00
parent 4b71c014e9
commit f9330fa201
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
serverAppConfigs-docs/Infrastructure/Homepage.md
+5 -1
View File
@@ -40,7 +40,11 @@ Media Library Apps section.
phosphor to amber CRT-AMBIOS (`--fg #ffb000` on `--bg #0a0600`), and the font
stack now leads with **VT323** loaded from the Google Fonts CDN (the deploy
also ships `shared/homepage/img/` beside the page, so `/img/*` serves the docs
screenshots). The docs page gained a full **API access** walkthrough
screenshots — the post-auth listener serves files only through the `@data`
path allowlist, so new top-level assets must be added there (the `@home`
catch-all answers anything else with `index.html`, i.e. a PNG arrives as
`200 text/html` and renders broken; pinned in `homepage_caddy.bats` — this
exact bug bit the screenshots on 2026-10-08). The docs page gained a full
(`/docs#api-access`): per-user OpenWebUI API keys (User menu → Settings →
Account → API keys), the base URL `https://ai.franksdank.cloud/api/v1`, and
copy-paste configs for **Opencode** (`~/.config/opencode/opencode.json`) and