or you could use something like caddy (https reverse-proxy, local cert), and have a dedicated ws running in the background that serves your files