WebSocket Connection Issues with Nginx Reverse Proxy Setup

[ajmeraaxesh]

Hi everyone,

I'm experiencing WebSocket connection issues when running LibreDesk behind an Nginx reverse proxy. The application works fine for regular HTTP requests, but WebSocket connections are failing.

Setup:

• LibreDesk running on port 9000
• Nginx as reverse proxy on port 80/443
• Standard Docker deployment

Issue:
WebSocket connections are being dropped or not establishing properly when accessing through the proxy.

Configuration attempted:

location / {
    proxy_pass http://localhost:9000;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

Questions:

1. Are there any specific Nginx configuration requirements for LibreDesk WebSocket support?
2. Should any additional headers or timeout settings be configured?
3. Has anyone successfully deployed LibreDesk with Nginx and can share their working configuration?

Any help would be greatly appreciated!

[abhinavxd]

Hi,

Just the following server block should do, nothing else needed.

server {
    listen 80;
    server_name _; 
    client_max_body_size 100M;

    location / {
        proxy_pass http://localhost:9000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr; 
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_cache_bypass $http_upgrade;
    }
}

[ajmeraaxesh]

still getting error for socket see the attached screenshot

here is my nginx conf file libredesk.conf
server {
listen 80;
server_name cs.edulab.in www.cs.edulab.in;
location / {
return 301 https://$host$request_uri;
}
}

server {
listen 443 ssl;
server_name cs.edulab.in www.cs.edulab.in;

ssl_certificate /etc/letsencrypt/live/cs.edulab.in/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/cs.edulab.in/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

client_max_body_size 100M;

# ==========================
# Frontend (Vue) on /app
# ==========================
location /app/ {
    root /root/libredesk-UI/frontend/dist;
    index index.html;
    try_files $uri $uri/ /app/index.html;
}

# ==========================
# Backend (Go API) on /
# ==========================
location / {
    proxy_pass http://127.0.0.1:9000;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Proto $scheme;

    proxy_cache_bypass $http_upgrade;
}

# ==========================
# Backend API shortcut
# ==========================
location /api/ {
    proxy_pass http://127.0.0.1:9000/api/;
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

# ==========================
# File Uploads
# ==========================
location /uploads/ {
    proxy_pass http://127.0.0.1:9000/uploads/;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

# ==========================
# **WebSocket handling** (wss://)
# ==========================
location /ws/ {
    proxy_pass http://127.0.0.1:9000/ws/;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Cookie $http_cookie;
    proxy_read_timeout 86400;
    proxy_send_timeout 86400;
    proxy_connect_timeout 60s;
}

# ==========================
# Maintenance page fallback
# ==========================
error_page 502 503 504 /undermaintenance/index.html;
location = /undermaintenance/index.html {
    root /var/www;
    internal;
}

}

[abhinavxd]

Are you on an older version? It looks like it from the screenshot.

Can you upgrade the app using this guide: https://docs.libredesk.io/getting-started/upgrade
As always, take a DB backup before upgrading.

Current version is v0.7.4-alpha

Also in your config.toml you can set https://github.com/abhinavxd/libredesk/blob/cc36ef5a3a20f2dc5cab79271bee1a4f28de1c01/config.sample.toml#L8C1-L9C1
check_update = true, so your app checks for updates frequently.

Also you don't need that many location blocks in your nginx config to get it working, just that server block I pasted with 1 location block will do it.
You don't need to handle every endpoint like /ws, /uploads /api.

It's a single binary app the frontend is injected inside the binary, so once you got the binary running using docker / just binary you just need that 1 block I pasted.
I think your installation is not single binary, checkout this for fresh installation - https://docs.libredesk.io/getting-started/installation

[worldfellow]

i have upgraded to version v0.7.4-alpha and still i can see the websocket issue
this is my nginx conf file ```
root@vmi587982:/etc/nginx/conf.d# pwd
/etc/nginx/conf.d
root@vmi587982:/etc/nginx/conf.d# cat libredesk.conf
server {
server_name cs.edulab.in;
client_max_body_size 100M;

location / {
    proxy_pass http://localhost:9000;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection 'upgrade';
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_cache_bypass $http_upgrade;
}

listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/cs.edulab.in/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/cs.edulab.in/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
if ($host = cs.edulab.in) {
return 301 https://$host$request_uri;
} # managed by Certbot

listen 80;
server_name cs.edulab.in;
return 404; # managed by Certbot

}