indded, it's crazy - using all this bleeding edge vulnerable stuff on dangerous configurations but well ... it allows ppl to throw stuff together and have something great easily which needs a lot of work if some dependency broke however I meant depending on your security software like selinux, users might need permissions to create / open sockets / ports on the network. edit: the application is running on like 127.0.0.1 1134 that's why you add Proxy-Lines to your vhost so every request on https://domain.tld/folder will be passed internally to port 1134 and back, it's like using php-fpm
after 3 months playing with nodejs still, nothing was done. for my new websites, it is a must to host via ISPConfog or other open source web hosting web apps. I don't know why admins didn't do anything about hosting webs with the ability of nodejs.