From e5c381cac9e9a02918a2d3887538685b505c2bca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alex=20S=C3=A1nchez?= Date: Tue, 30 Jun 2026 11:42:35 -0600 Subject: [PATCH 1/2] fix[installer](proxy): added upgrade header so ws connections can math between frontend and backend --- installer/templates/proxy.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/installer/templates/proxy.go b/installer/templates/proxy.go index 56388bdf6..625a2e877 100644 --- a/installer/templates/proxy.go +++ b/installer/templates/proxy.go @@ -15,6 +15,9 @@ server { location / { proxy_pass $utmstack; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "Upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; @@ -69,6 +72,9 @@ server { location / { proxy_pass $utmstack; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "Upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; From e3b0d527c919a35da29792f9e5134cf512dbed2f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alex=20S=C3=A1nchez?= Date: Wed, 1 Jul 2026 07:59:18 -0600 Subject: [PATCH 2/2] fix[installer](weboscket): added lookup table to handle upgrade headers properly --- installer/templates/proxy.go | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/installer/templates/proxy.go b/installer/templates/proxy.go index 625a2e877..cb6d18108 100644 --- a/installer/templates/proxy.go +++ b/installer/templates/proxy.go @@ -1,6 +1,11 @@ package templates -const ProxyUbuntu string = `server { +const ProxyUbuntu string = `map $http_upgrade $connection_upgrade { + default upgrade; + '' close; +} + +server { listen 80 default_server; server_name _; return 301 https://$host$request_uri; @@ -17,7 +22,7 @@ server { proxy_pass $utmstack; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "Upgrade"; + proxy_set_header Connection $connection_upgrade; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; @@ -57,6 +62,11 @@ http { keepalive_timeout 65; + map $http_upgrade $connection_upgrade { + default upgrade; + '' close; + } + server { listen 80 default_server; server_name _; @@ -74,7 +84,7 @@ server { proxy_pass $utmstack; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "Upgrade"; + proxy_set_header Connection $connection_upgrade; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;