WebSocket origin errors behind Traefik (X-Forwarded-Proto: wss)

[w00dwork]

I was perusing my dnscrypt-proxy logs and came across this warning, which repeats whenever the monitoring web interface is open:

[WARNING] WebSocket upgrade error: websocket: request origin not allowed by Upgrader.CheckOrigin

I'm running dnscrypt-proxy 2.1.20 behind Traefik.

After some troubleshooting, it looks like Traefik sends X-Forwarded-Proto: wss for secure WebSocket connections, while dnscrypt-proxy expects https, causing the origin validation to fail.

Figured I'd pass this along in case it's something worth addressing.