21
0

AssppWeb

2026-08-06
2026-08-06
文章摘要
|

原作者:Lakr233 https://github.com/lakr233

https://github.com/lakr233/assppweb

A web-based tool for acquiring and installing iOS apps outside the App Store. Authenticate with your Apple ID, search for apps, acquire licenses, and install IPAs directly to your device.

assppweb.png

Zero-Trust Architecture

AssppWeb uses a zero-trust design where the server never sees your Apple credentials. All Apple API communication happens directly in your browser via WebAssembly (libcurl.js with Mbed TLS 1.3). The server only acts as a blind TCP relay (Wisp protocol) and handles IPA compilation from public CDN downloads.

⚠️ Important Security Notice: There are no official Asspp Web instances. Use any public instance at your own risk. While the backend cannot read your encrypted traffic, a malicious host could serve a modified frontend to capture your credentials before encryption. Therefore, do not blindly trust public instances. We strongly recommend self-hosting your own instance or using one provided by a trusted partner. Always verify the SSL certificate and ensure you are connecting to a secure, authentic endpoint.

重要安全提示:不存在官方 Asspp Web实例。请自行承担风险使用任何公共实例。尽管后端无法读取您加密的通信内容,但恶意主机仍可能提供经过修改的前端服务,以便在加密前捕获您的凭据。因此,切勿盲目信任公共实例。我们强烈建议自行托管自己的实例或使用由可信合作伙伴提供的实例。务必验证 SSL证书,并确保您连接的是安全、可靠的端点。

原作者声明:

安装

curl -O https://raw.githubusercontent.com/Lakr233/AssppWeb/main/compose.yml
docker compose up -d
services:
  asspp:
    image: ghcr.io/lakr233/assppweb:latest
    ports:
      - "8080:8080"
    volumes:
      - ./mnt/asspp-data:/data
    environment:
      - DATA_DIR=/data
      - PORT=8080
      # - DOWNLOAD_THREADS=8
      # - ACCESS_PASSWORD=your_password_here
    restart: unless-stopped
    logging:
      driver: "json-file"
      options:
        max-size: "128m"
        max-file: "5"

Environment Variables

Variable

Default

Description

PORT

8080

Server listen port

DATA_DIR

./data

Directory for storing compiled IPAs

PUBLIC_BASE_URL

(auto-detect)

Public URL for generating install manifests (e.g. https://asspp.example.com)

UNSAFE_DANGEROUSLY_DISABLE_HTTPS_REDIRECT

false

Disable HTTPS redirect (see warning below)

AUTO_CLEANUP_DAYS

0

Automatically delete cached IPA files older than specified days (0 to disable)

AUTO_CLEANUP_MAX_MB

0

Automatically delete oldest cached IPA files when size exceeds this MB limit (0 to disable)

MAX_DOWNLOAD_MB

0

Reject downloads exceeding this size in MB to prevent out-of-memory errors (0 to disable)

DOWNLOAD_THREADS

8

Number of parallel threads for IPA downloads (1–32)

ACCESS_PASSWORD

(none)

Require a password to access the web UI and API (empty to disable)

支持与分享

如果这篇文章对你有帮助,欢迎分享给更多人或者给予支持!

AssppWeb
/archives/019fd5c7-3cbe-75a8-82e2-0aa971de203e
作者
北祢
发布于
2026-08-06
许可协议
CC BY-NC-SA 4.0