# storebound desktop downloads on storebound.dev (included in the :443 vhost of /etc/apache2/sites-available/storebound.dev.conf
# as  Include /etc/apache2/storebound-desktop.conf ; see docs/desktop-release.md).
# The downloads are a section of the home page (storebound.dev/#download, it reads latest.json); site/desktop/index.html
# only redirects there and comes with the site. The binaries and latest.json live outside the site's
# document root, because the site's publish rsync deletes everything that is not in the repository.
Alias /desktop/latest.json /var/www/storebound-desktop/latest.json
Alias /desktop/beta/latest.json /var/www/storebound-desktop/beta/latest.json
Alias /desktop/rehearsal/latest.json /var/www/storebound-desktop/rehearsal/latest.json
Alias /desktop/dl/ /var/www/storebound-desktop/dl/
<Directory /var/www/storebound-desktop>
  Options -Indexes -FollowSymLinks
  AllowOverride None
  Require all granted
  <FilesMatch "\.(dmg|AppImage|deb|exe|gz|sig)$">
    ForceType application/octet-stream
    Header set Content-Disposition "attachment"
  </FilesMatch>
</Directory>
<LocationMatch "^/desktop/((beta|rehearsal)/)?latest\.json$">
  Header set Cache-Control "no-cache"
  Header set Access-Control-Allow-Origin "*"
</LocationMatch>
<LocationMatch "^/desktop/dl/">
  # a published file never changes (a new version gets a new folder)
  Header set Cache-Control "public, max-age=31536000, immutable"
  Header set X-Content-Type-Options "nosniff"
</LocationMatch>