You can use scp from your machine to the VM using flyctl’s ssh commands.
flyctl ssh establish
flyctl ssh issue --agent
Once you’ve issued a cert, connect to app.internal if WireGuard is active or your VM’s private ip (found with flyctl ips private)
scp root@app.internal:/path/to/file file
The volume snapshots aren’t quite ready yet, but they will be soon.