media-updates/Dockerfile

# Static files, nothing more: a manifest and the APK it points at.
FROM nginx:alpine
COPY nginx.conf /etc/nginx/conf.d/default.conf
COPY public/ /usr/share/nginx/html/
Somewhere for the app to look for a newer version of itself Two static files behind nginx and a script that writes them. No authentication: there is no account to check against, and the APK carries no secret — the credential in that app is the addon URL, which lives in the device keystore. The APKs are committed rather than stored elsewhere. At ~34MB and a few releases a year that beats standing up artifact storage for one app, and the history is disposable because only the newest artifact is ever fetched. release.py reads the version out of amber-adult's pubspec instead of taking it as an argument. A manifest advertising a build number the APK does not carry is an update the device installs and is then offered again, every launch, forever. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> 2026-08-30 01:53:38 +00:00			`# Static files, nothing more: a manifest and the APK it points at.`
			`FROM nginx:alpine`
			`COPY nginx.conf /etc/nginx/conf.d/default.conf`
			`COPY public/ /usr/share/nginx/html/`