Simplify deployment: port 9000 is internal, handled automatically, and no longer exposed

Author: polius

README.md

@@ -53,7 +53,6 @@ Open `docker-compose.yml` and replace **both occurrences** of `<SECRET_KEY>` wit
 To enable HTTPS, edit the `Caddyfile`:
 
 - Replace `localhost:80` with your domain (e.g., `filesync.app`).
-- Replace `http://localhost:9000` with your domain and port (e.g., `filesync.app:9000`).
 
 Caddy will automatically provision and renew SSL certificates for your domain.
 
@@ -63,10 +62,6 @@ Caddy will automatically provision and renew SSL certificates for your domain.
 filesync.app {
 	reverse_proxy filesync:80
 }
-
-filesync.app:9000 {
-	reverse_proxy peerjs:9000
-}
 ```
 
 **5. Start the services**

deploy/Caddyfile

@@ -1,7 +1,3 @@
 localhost:80 {
 	reverse_proxy filesync:80
-}
-
-http://localhost:9000 {
-	reverse_proxy peerjs:9000
-}
+}

deploy/docker-compose.yml

@@ -5,7 +5,6 @@ services:
     ports:
       - "80:80"
       - "443:443"
-      - "9000:9000"
     volumes:
       - ./Caddyfile:/etc/caddy/Caddyfile:ro
       - filesync:/data
@@ -28,6 +27,7 @@ services:
   peerjs:
     image: peerjs/peerjs-server:1.1.0-rc.2
     container_name: filesync-peerjs
+    command: peerjs --path /peerjs
     restart: unless-stopped
 
   filesync:

nginx.conf

@@ -14,6 +14,18 @@ server {
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
+    # Proxy /peerjs requests to PeerJS server
+    location /peerjs {
+        proxy_pass http://peerjs:9000/peerjs;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
     # Handle root `/`
     location = / {
         try_files /index.html =404;

web/js/modules/webrtc/file.js

@@ -136,8 +136,8 @@ export class File {
       const isSecure = window.isSecureContext && window.location.hostname !== 'localhost';
       const peer = new Peer(uuid, {
         host: window.location.hostname,
-        port: 9000,
-        path: "/",
+        port: isSecure ? 443 : 80,
+        path: "/peerjs",
         secure: isSecure,
         config: {
           iceServers: iceServers,

web/js/modules/webrtc/user.js

@@ -64,8 +64,8 @@ export class User {
       const isSecure = window.isSecureContext && window.location.hostname !== 'localhost';
       this._peer = new Peer(peer_id, {
         host: window.location.hostname,
-        port: 9000,
-        path: "/",
+        port: isSecure ? 443 : 80,
+        path: "/peerjs",
         secure: isSecure,
         config: {
           iceServers: iceServers,