Apparently websocket handshaking is a trivial protocol and then we continue normally, so we should just detect it on inbound connections and gracefully run over websocket.
Will need to wrap it in nginx to add TLS for web clients to connect, but at least that part is trivial.