For iOS webcredentials, apple requires a file to be served to allow the app to authenticate to the remote party.
This file is served from /apple-app-site-association and needs to contain the ID of the App.
It'd be a great addition to the passkey server if it could be configured with App IDs to easily allow this, without having to run it behind a reverse proxy and override the path.