feat(downloads): route desktop releases through GitHub

packages/config/src/ConfigLoader.ts

@@ -92,6 +92,7 @@ function defaultConfig(): MasterConfig {
 			api: {
 				port: 8080,
 				ip_ban_exempt_ips: [],
+				desktop_github_redirect_countries: [],
 				presigned_attachment_uploads_enabled: false,
 				presigned_downloads_enabled: false,
 				presigned_harvest_downloads_enabled: true,

packages/config/src/MasterConfig.ts

@@ -91,6 +91,7 @@ export interface MasterConfig {
 		api: {
 			port: number;
 			ip_ban_exempt_ips: Array<string>;
+			desktop_github_redirect_countries: Array<string>;
 			presigned_attachment_uploads_enabled: boolean;
 			presigned_downloads_enabled: boolean;
 			presigned_harvest_downloads_enabled: boolean;

packages/config/src/config_loader/EnvironmentOverrides.ts

@@ -77,6 +77,10 @@ const NAMED_FLUXER_ENV_OVERRIDES: Record<string, NamedEnvOverride> = {
 	FLUXER_NATS_AUTH_TOKEN: {path: ['services', 'nats', 'auth_token']},
 	FLUXER_API_PORT: {path: ['services', 'api', 'port'], parse: parseEnvValue},
 	FLUXER_API_IP_BAN_EXEMPT_IPS: {path: ['services', 'api', 'ip_ban_exempt_ips'], parse: parseCsv},
+	FLUXER_API_DESKTOP_GITHUB_REDIRECT_COUNTRIES: {
+		path: ['services', 'api', 'desktop_github_redirect_countries'],
+		parse: parseCsv,
+	},
 	FLUXER_API_PRESIGNED_ATTACHMENT_UPLOADS_ENABLED: {
 		path: ['services', 'api', 'presigned_attachment_uploads_enabled'],
 		parse: parseEnvValue,