N8n behind Apache reverse proxy with HTTPS and WebSocket support – issues with push notifications

Questions
2

I’ve managed to solve the problem myself after some testing and adjustments.

The key issue was related to WebSocket configuration through Apache reverse proxy. Here’s the working setup that now fully supports n8n behind Apache with HTTPS on port 8443, including real-time features like Telegram Trigger testing.
:wrench: Working docker-compose.yml:

version: "3.7"

services:
  n8n:
    image: n8nio/n8n
    container_name: n8n
    restart: always
    ports:
      - "5678:5678"
    environment:
      - N8N_HOST=n8n.kurdak.eu
      - N8N_PORT=5678
      - N8N_PROTOCOL=https
      - N8N_EDITOR_BASE_URL=https://n8n.kurdak.eu
      - WEBHOOK_URL=https://n8n.kurdak.eu
      - N8N_WEBHOOK_URL=https://n8n.kurdak.eu
      - N8N_BASIC_AUTH_ACTIVE=true
      - N8N_PUSH_BACKEND=websocket
      - N8N_SECURE_COOKIE=false
      - N8N_SKIP_WEBHOOK_DEREGISTRATION_SHUTDOWN=true
      - N8N_DIAGNOSTICS_ENABLED=false
      - N8N_DISABLE_ORIGIN_CHECK=true
      - N8N_ALLOWED_ORIGINS=https://n8n.kurdak.eu
    volumes:
      - n8n_data:/home/node/.n8n

volumes:
  n8n_data:

:wrench: Apache vhost (port 8443):

# WebSocket support for /rest/push
RewriteEngine On
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /rest/push/(.*) ws://10.0.31.159:5678/rest/push/$1 [P,L]

ProxyPreserveHost On
ProxyRequests Off
SSLProxyEngine On

<Proxy *>
  Require all granted
</Proxy>

ProxyPass /rest/push ws://10.0.31.159:5678/rest/push
ProxyPassReverse /rest/push ws://10.0.31.159:5678/rest/push

# Required headers for WebSocket
RequestHeader set Connection "upgrade"
RequestHeader set Upgrade %{HTTP:Upgrade}e env=HTTP_UPGRADE
RequestHeader set Host %{HTTP_HOST}e env=HTTP_HOST
RequestHeader set Origin "https://n8n.kurdak.eu"

# Main traffic
ProxyPass / http://10.0.31.159:5678/ nocanon
ProxyPassReverse / http://10.0.31.159:5678/

Everything now works as expected. Hopefully this configuration helps someone facing the same WebSocket issue with n8n behind Apache.

4 Likes