The Operator chapters are for administrators who install and run a TASTEREMOTE server themselves. To use the service TASTEDEV runs instead of running a server, see Remote desktop service. To have the server installed and built for you, use Build inquiry.
| Component | What it does | Default address |
|---|---|---|
| Signal server (signal) | Accounts, devices and connection brokering (REST /api, WebSocket /ws, /healthz). In a package install, it also serves the host installers at /downloads/ and host updates at /updates/. | 127.0.0.1:8080 |
| Web (web) | The browser pages (viewer, My devices, admin) | 127.0.0.1:3000 |
| Reverse proxy | Takes HTTPS (80/443) and splits it between signal and web. Uses one of Caddy, nginx or Apache httpd. | 80, 443 |
| TURN (coturn) | Relays video when the host and viewer cannot connect directly. | 3478 |
| Host | The TASTEREMOTE program on the computer that receives connections | Connects to the server's wss://<address>/ws |
The proxy sends /api/*, /ws, /healthz, /downloads/* and /updates/* to signal, and everything else to web.
/api at the same address → signalwss://<address>/ws → signal (connection brokering)/downloads/ or /updates/ (self-update)| Port | Protocol | Use |
|---|---|---|
| 80 | TCP | Certificate issuing (ACME), redirect to HTTPS |
| 443 | TCP (also UDP for HTTP/3) | HTTPS |
| 3478 | UDP, TCP | TURN/STUN |
| 49160–49200 | UDP | TURN relay |
Do not open 8080 and 3000 to the outside. TURN can also relay to the server's own public IP, so on public addresses let only the proxy, coturn and sshd listen. You can check with sudo ss -lntup.
deploy/ folder.For the detailed steps, see Server installation.