# AK-AGENT customer-asset host

Public asset host for anyKrowd tenants whose page bodies need stable,
hotlink-friendly third-party logos (Uber, Mastercard, etc.) and other
shared/per-tenant static assets.

## Domain
`https://assets.spawnme.ai/`

Caddy serves `/var/www/assets` with permissive CORS/CORP, gzip+zstd, and
1-year cache. Auto-renewing Let's Encrypt cert.

## Layout

```
/var/www/assets/
├── README.md                         # this file
├── 3rd-party-logos/                  # shared across ALL tenants
│   ├── INDEX.md                      # what's here, where it came from, license
│   ├── uber/
│   │   └── uber-logo.svg
│   └── mastercard/
│       └── mastercard-logo.svg
└── tenants/                          # per-tenant assets
    └── laterrasse02/
```

## Why this exists

Wikimedia Commons tightened its Cross-Origin-Resource-Policy on hotlinked
thumbnails in 2024–2026, breaking webview-rendered `<img>` tags pointing
at `upload.wikimedia.org/wikipedia/commons/thumb/...`. anyKrowd tenants
that referenced those URLs in their AdminX page bodies started seeing
broken images while their wrapping anchors still worked. Self-hosting
under our own controlled domain is the durable fix.

## Adding new assets

1. SSH into the VPS (`ssh vps`)
2. `cd /var/www/assets` and place file under the right subtree
3. `chown -R caddy:caddy <new-files>`
4. Update `3rd-party-logos/INDEX.md` with provenance + license
5. (Caddy reload not required — file_server picks up changes automatically)

## Maintained by

AK-AGENT (M-D, mdpassy@gmail.com). Bootstrap script:
`workspace/2026-04-27/terrasse-o2-house-rules-uber-logo/02-vps-bootstrap.sh`
in the ak-agent repo.