fix: replace client-side Swagger server detection with server-side dynamic spec

- Change swaggerUi.setup to pass null and fetch spec from /api/swagger.json
- Update /api/swagger.json handler to dynamically set server URL based on request
- Remove dead client-side detection script (swagger-server-detection.js)
- Server-side detection respects TRUST_PROXY for reverse proxy scenarios
- req.protocol and req.get('host') automatically use X-Forwarded headers when configured
- Fixes issue where placeholder URL was never replaced due to window.ui being unavailable

server/index.js

@@ -296,15 +296,32 @@ app.get('/ready', (req, res) => {
 // ---------------------------------------------------------------------------
 // Swagger UI - publicly accessible API documentation
 // ---------------------------------------------------------------------------
-app.use('/api/swagger', swaggerUi.serve, swaggerUi.setup(swaggerSpec, {
+app.use('/api/swagger', swaggerUi.serve, swaggerUi.setup(null, {
   customSiteTitle: 'sofarr API Documentation',
   customCss: '.swagger-ui .topbar { display: none }',
   customJs: [
-    '/swagger-auth-banner.js',
-    '/swagger-server-detection.js'
-  ]
+    '/swagger-auth-banner.js'
+  ],
+  swaggerOptions: {
+    url: '/api/swagger.json'
+  }
 }));
 
+// Serve the raw OpenAPI spec as JSON with dynamic server URL
+app.get('/api/swagger.json', (req, res) => {
+  // Clone the spec to avoid modifying the original
+  const specCopy = JSON.parse(JSON.stringify(swaggerSpec));
+  
+  // Replace the server URL with the current request's origin
+  if (specCopy.servers && specCopy.servers.length > 0) {
+    const protocol = req.protocol;
+    const host = req.get('host');
+    specCopy.servers[0].url = `${protocol}://${host}`;
+  }
+  
+  res.json(specCopy);
+});
+
 // ---------------------------------------------------------------------------
 // Static files — served before API routes
 // index.html is served manually so we can inject the CSP nonce