Public endpoints
- GET/{type}.json— manifest
- GET/gallery/{album}/{file}— photo
- GET/gallery/{album}/thumbs/{file}— thumbnail
- GET/museum/{id}/{file}— camera image
- GET/rosnik/{file}— magazine PDF
- GET/gear/{file}— gear photo
- GET/services/{file}— service image
- GET/site/{file}— site asset
Admin API (Bearer auth)
- POST/api/upload— upload file(s)
- POST/api/manifest— save manifest JSON
- POST/api/delete— delete a file
- POST/api/save-users— save users manifest
- POST/api/debug— server diagnostics
Admin endpoints require Authorization: Bearer <token>. Unauthorized requests are rejected with 401/403.
Content types
Services
Service card images
Site
Profile & hero images
Technical details
Allowed types
jpg png webp avif gif svg pdf
CORS origins
filiprosa.cz + localhost
Flat-file server. Manifests (JSON) describe collections; binary assets (images, PDFs) are served directly. Content is managed via the admin panel at filiprosa.cz/panel0x.