fix: replace client-side Swagger server detection with server-side dynamic spec

- Change swaggerUi.setup to pass null and fetch spec from /api/swagger.json
- Update /api/swagger.json handler to dynamically set server URL based on request
- Remove dead client-side detection script (swagger-server-detection.js)
- Server-side detection respects TRUST_PROXY for reverse proxy scenarios
- req.protocol and req.get('host') automatically use X-Forwarded headers when configured
- Fixes issue where placeholder URL was never replaced due to window.ui being unavailable

server/app.js

@@ -181,18 +181,30 @@ function createApp({ skipRateLimits = false } = {}) {
   });
 
   // Swagger UI - publicly accessible API documentation
-  app.use('/api/swagger', swaggerUi.serve, swaggerUi.setup(swaggerSpec, {
+  app.use('/api/swagger', swaggerUi.serve, swaggerUi.setup(null, {
     customSiteTitle: 'sofarr API Documentation',
     customCss: '.swagger-ui .topbar { display: none }',
     customJs: [
-      '/swagger-auth-banner.js',
-      '/swagger-server-detection.js'
-    ]
+      '/swagger-auth-banner.js'
+    ],
+    swaggerOptions: {
+      url: '/api/swagger.json'
+    }
   }));
 
-  // Serve the raw OpenAPI spec as JSON
+  // Serve the raw OpenAPI spec as JSON with dynamic server URL
   app.get('/api/swagger.json', (req, res) => {
-    res.json(swaggerSpec);
+    // Clone the spec to avoid modifying the original
+    const specCopy = JSON.parse(JSON.stringify(swaggerSpec));
+    
+    // Replace the server URL with the current request's origin
+    if (specCopy.servers && specCopy.servers.length > 0) {
+      const protocol = req.protocol;
+      const host = req.get('host');
+      specCopy.servers[0].url = `${protocol}://${host}`;
+    }
+    
+    res.json(specCopy);
   });
 
   // API routes