Responsibilities
The Signaling Server handles authenticated WebSocket/HTTP control traffic, session negotiation, presence, account-driven events, task/chat routing and other orchestration.
Media boundary
Remote Desktop video and File Transfer payloads are not sent through the Signaling server. The server coordinates WebRTC/ICE and can provide TURN configuration, but the payload follows the negotiated peer/relay route.
Database
MariaDB stores durable state. Schema migration is checked before the listener becomes available so an incompatible schema does not silently run as healthy.
Reverse proxy
A typical production deployment listens on loopback and relies on the existing HTTPS reverse proxy for public HTTP/WebSocket access.