update: the status web service listens on port 7081 by default.

README.md

@@ -122,7 +122,7 @@ must have the type shown below; an unknown section or setting is an error.
 | `docker` | `mode` | string | `auto` | `auto` secures Docker when its service is installed, `on` requires it, `off` removes the rules |
 | `docker` | `exposed_ports` | list | | TCP ports and port ranges (`8000:8100`) reachable from the external interface; at most 15, a range counting as two |
 | `web` | `enabled` | boolean | `true` | The status web service on the internal address |
-| `web` | `port` | integer | `8080` | TCP port of the status web service |
+| `web` | `port` | integer | `7081` | TCP port of the status web service |
 | `web` | `jwt_secret` | string | | Secret, at least 32 characters, that signs the tokens for `/config`; without it `/config` is not served |
 
 A minimal site-to-site configuration in `auto` mode:
@@ -407,7 +407,7 @@ modules shipped with the package; the configuration file accepts any module inst
 ## Status web service
 
 The `vpn-router-web` service shows the state of the router on its internal address and
-`web.port` (8080 by default). It uses only the Python standard library, serves HTTP without
+`web.port` (7081 by default). It uses only the Python standard library, serves HTTP without
 authentication, and shows no configuration: no key, identity, address or subnet.
 
 | Page | Content |
@@ -428,8 +428,8 @@ the WireGuard peers with the age of their last handshake and their traffic. `sta
 all these services are active, and `degraded` otherwise.
 
 ```bash
-curl http://10.0.0.4:8080/
-curl http://10.0.0.4:8080/status
+curl http://10.0.0.4:7081/
+curl http://10.0.0.4:7081/status
 ```
 
 ### The /config page
@@ -466,7 +466,7 @@ print(f'{head}.{body}.{sign}')
 ```
 
 ```bash
-curl -H "Authorization: Bearer $TOKEN" http://10.0.0.4:8080/config
+curl -H "Authorization: Bearer $TOKEN" http://10.0.0.4:7081/config
 ```
 
 ### The /users API
@@ -491,7 +491,7 @@ network in plain HTTP, like the token.
 
 ```bash
 curl -H "Authorization: Bearer $TOKEN" -H 'Content-Type: application/json' \
-     -d '{"name": "alice", "password": "s3cr3t-pass"}' http://10.0.0.4:8080/users
+     -d '{"name": "alice", "password": "s3cr3t-pass"}' http://10.0.0.4:7081/users
 ```
 
 The service starts on its own, without waiting for `vpn-router-setup`, and keeps running. Every
@@ -509,7 +509,8 @@ The `vpn-router-manager` package, built in the repository `linux-cloud-router-ma
 application that shows the state of the router and manages its users through the status web
 service. It can be installed on the router or on another Linux system. While it is installed on
 the router, `vpn-router-setup` opens its port (`port` in `/etc/vpn-router-manager/manager.json`,
-8090 by default) on the internal interface; restart `vpn-router-setup` after changing it.
+7080 by default, HTTP; 7443 is kept for it with TLS) on the internal interface; restart
+`vpn-router-setup` after changing it.
 
 ## Removal