Description
Hello, I’ve an issue with message in my fresh rocket.chat instance.
I can hear the sound of message but don’t see them. To see the message I need to refresh page.
Server Setup Information
- Version of Rocket.Chat Server: 5.0.4
- Operating System: Debian 11
- Deployment Method: Tar
- Number of Running Instances: 1
- DB Replicaset Oplog:
- NodeJS Version: 14.20.0
- MongoDB Version: 5.0.11 / wiredTiger (oplog Activé)
- Proxy: nginx
- Firewalls involved: No FW
Any additional Information
I have a first Nginx reverseproxy with this conf :
Summary
upstream backend {
server IP_Of_RocketChat_Server:3000;
keepalive 32;
}
server {
if ($host = chat.fqdn.fr) {
return 301 https://$host$request_uri;
} # managed by Certbot
#listen 80 default_server;
server_name chat.fqdn.fr;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
server_name chat.fqdn.fr;
http2_push_preload on; # Enable HTTP/2 Server Push
# Enable TLS versions (TLSv1.3 is required upcoming HTTP/3 QUIC).
ssl_protocols TLSv1.2 TLSv1.3;
# Enable TLSv1.3's 0-RTT. Use $ssl_early_data when reverse proxying to
# prevent replay attacks.
#
# @see: https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data
ssl_early_data on;
ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384';
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:50m;
# HSTS (ngx_http_headers_module is required) (15768000 seconds = six months)
add_header Strict-Transport-Security max-age=15768000;
# OCSP Stapling ---
# fetch OCSP records from URL in ssl_certificate and cache them
ssl_stapling on;
ssl_stapling_verify on;
add_header X-Early-Data $tls1_3_early_data;
location / {
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
client_max_body_size 50M;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Frame-Options SAMEORIGIN;
proxy_buffers 256 16k;
proxy_buffer_size 16k;
client_body_timeout 60;
send_timeout 300;
lingering_timeout 5;
proxy_connect_timeout 90;
proxy_send_timeout 300;
proxy_read_timeout 90s;
proxy_http_version 1.1;
proxy_pass http://backend;
}
ssl_certificate /etc/letsencrypt/live/chat.fqdn.fr/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/chat.fqdn.fr/privkey.pem; # managed by Certbot
}
# This block is useful for debugging TLS v1.3. Please feel free to remove this
# and use the `$ssl_early_data` variable exposed by NGINX directly should you
# wish to do so.
map $ssl_early_data $tls1_3_early_data {
"~." $ssl_early_data;
default "";
}
And this is the nginx conf on my rocketchat server :
Summary
upstream rocket_backend {
server 127.0.0.1:3000;
}
server {
listen 80;
server_name chat.fqdn.fr;
access_log /var/log/nginx/rocketchat-access.log;
error_log /var/log/nginx/rocketchat-error.log;
location / {
proxy_pass http://rocket_backend/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forward-Proto http;
proxy_set_header X-Nginx-Proxy true;
proxy_redirect off;
}
}
Thank for reply