diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 1c9731a..c9f8f10 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -7,8 +7,17 @@
 }
 
 http://{$BASE_DOMAIN} {
-	root * /srv/www
-	file_server
+	# Launcher downloads live in a sibling mount (not nested under /srv/www,
+	# which is a read-only mount → can't create a nested mountpoint).
+	# handle_path strips the /launcher prefix before serving /srv/launcher.
+	handle_path /launcher/* {
+		root * /srv/launcher
+		file_server browse
+	}
+	handle {
+		root * /srv/www
+		file_server
+	}
 }
 
 http://auth.{$BASE_DOMAIN} {
diff --git a/docker-compose.yml b/docker-compose.yml
index fda4396..116aadc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -42,7 +42,7 @@ services:
       - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
       - ./www:/srv/www:ro
       - ./pack:/srv/pack:ro
-      - ./mirror/launcher:/srv/www/launcher:ro
+      - ./mirror/launcher:/srv/launcher:ro
       - ./mirror/upstream:/srv/mirror:ro   # byte-exact upstream mirror (see 11)
     networks:
       mcnet: