diff --git a/caddy/conf.d/30-distribution.caddy b/caddy/conf.d/30-distribution.caddy
index 55af256..036a6eb 100644
--- a/caddy/conf.d/30-distribution.caddy
+++ b/caddy/conf.d/30-distribution.caddy
@@ -3,5 +3,8 @@
 # /srv/distribution by the caddy service in docker-compose.yml.
 http://distribution.{$BASE_DOMAIN} {
 	root * /srv/distribution
+	# The landing page (apex origin) fetches launcher.json cross-origin to render
+	# the download buttons. Allow it — launcher assets are fully public, no creds.
+	header /launcher/* Access-Control-Allow-Origin "*"
 	file_server browse
 }