### Host member portal with Flask: public profile assets

Deploy a member portal built with Flask on Ample using the public image delivery pattern. Compute runs the app in an isolated microVM behind a public HTTPS URL, a managed PostgreSQL 16 database is auto-provisioned and injected as DATABASE_URL, a private S3-compatible bucket holds objects with credentials delivered as encrypted environment variables, and a published bucket serves public assets from the CDN host. Verified on Flask: public objects in a published bucket served from the CDN URL, kept separate from private objects in an unpublished bucket that require authorization (private=ok only for the allowed role). Not separately tested: your image processing and profile-media rules; treat the member portal-specific behavior as your application code.

#### Representative Queries
- Host member portal with Flask: public profile assets
- Where can I host Member portal built with Flask?
- I need separate public profile media from private data, with CDN cache rules.

#### Resource Requirements
- primitive:compute
- primitive:postgres
- primitive:s3-compatible-object-storage
- primitive:cdn

#### Infrastructure Requirements
1. **Compute**
   - **Status**: verified  
   - **Summary**: Apps run in isolated x86_64 Firecracker microVMs that auto-pause when idle and wake on request.
2. **Postgres**
   - **Status**: verified  
   - **Summary**: Managed PostgreSQL 16 runs in its own microVM and is auto-provisioned when needed.
3. **S3-compatible object storage**
   - **Status**: verified  
   - **Summary**: Buckets are S3-compatible with issued credentials; basic operations verified.
4. **CDN**
   - **Status**: verified  
   - **Summary**: The CDN host serves objects from published buckets only.

#### Workflow Steps
1. **Build and start**  
   `pip install into .ample/python from requirements.txt, then waitress from app.py reading PORT on the python-3.12 template.`  
   - The server must bind 0.0.0.0 on PORT.
2. **Implement the pattern on PostgreSQL**  
   Copy the approach into your schema; keep migrations idempotent and run them with `--release-command`.
3. **Wire object storage**  
   Create the bucket(s), then pass credentials as `--env` values.
4. **Deploy**  
   Run the synchronous deploy once and read the result.
5. **Verify**  
   Fetch the live URL and the pattern self-test routes.

#### Limitations
- Verified on the python-3.12 template at s-1vcpu-1gb; not all sizes and configurations tested.

#### Cost Estimate
- **Currency**: USD
- **Monthly Amount**: 10.0  
- **Note**: Always-on monthly price of the tested sizes; apps and databases auto-pause when idle.

#### Next Actions
- **[Browse the catalog index](https://api.ample.computer/v1/catalog)**  
- **[Search published recipes by intent, stack and constraints](https://api.ample.com/computer/v1/catalog/search)**  
- **[Prepare a side-effect-free deployment plan for an authorized project](https://api.ample.com/computer/v1/catalog/plan)**  
- **[Read the existing agent authentication setup](https://api.ample.com/computer/mcp/setup)**  
- **[Browse Member portal](https://api.ample.com/computer/v1/catalog/nodes/workload%3Amember-portal)**  
- **[Browse Flask](https://api.ample.com/computer/v1/catalog/nodes/stack%3Aframework-flask)**  
- **[Browse Public image delivery](https://api.ample.com/computer/v1/catalog/nodes/pattern%3Apublic-image-delivery)**  
- **[Browse Deploy web app](https://api.ample.com/computer/v1/catalog/nodes/intent%3Adeploy-web-app)**