[GH-ISSUE #1061] SSE standard set reverse Proxy is not in Document #4999

New issue

Closed

opened 2026-03-01 15:37:55 +03:00 by kerem · 2 comments

kerem commented

2026-03-01 15:37:55 +03:00

Owner

Originally created by @Altria-Pendr on GitHub (May 18, 2025).
Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/1061

dear DEV
this report is about SSE nginx config is not be write in Document [https://nginxui.com/zh_CN/guide/nginx-proxy-example.html](nginx config in reverse Proxy)
i use server {
listen 80;
listen [::]:80;

server_name     <your_server_name>;
rewrite ^(.*)$  https://$host$1 permanent;

}

map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}

server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;

server_name         <your_server_name>;

ssl_certificate     /path/to/ssl_cert;
ssl_certificate_key /path/to/ssl_cert_key;

location / {
    proxy_set_header    Host                $host;
    proxy_set_header    X-Real-IP           $remote_addr;
    proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
    proxy_set_header    X-Forwarded-Proto   $scheme;
    proxy_http_version  1.1;
    proxy_set_header    Upgrade             $http_upgrade;
    proxy_set_header    Connection          $connection_upgrade;
    proxy_pass          http://127.0.0.1:9000/;
}

}

Originally created by @Altria-Pendr on GitHub (May 18, 2025). Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/1061 dear DEV this report is about SSE nginx config is not be write in Document [https://nginxui.com/zh_CN/guide/nginx-proxy-example.html](nginx config in reverse Proxy) i use server { listen 80; listen [::]:80; server_name <your_server_name>; rewrite ^(.*)$ https://$host$1 permanent; } map $http_upgrade $connection_upgrade { default upgrade; '' close; } server { listen 443 ssl; listen [::]:443 ssl; http2 on; server_name <your_server_name>; ssl_certificate /path/to/ssl_cert; ssl_certificate_key /path/to/ssl_cert_key; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_pass http://127.0.0.1:9000/; } }

kerem

2026-03-01 15:37:55 +03:00

closed this issue
added the
bug
label

kerem commented

2026-03-01 15:37:56 +03:00

Author

Owner

@Altria-Pendr commented on GitHub (May 18, 2025):

server {
    listen          80;
    listen          [::]:80;

    server_name     server_name;
    rewrite ^(.*)$  https://$host$1 permanent;
}

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
    listen  443       ssl http2;
    listen  [::]:443  ssl;

    server_name        server_name ;

    ssl_certificate     /etc/nginx/ssl/*.ocet.com.cn_ocet.com.cn_2048/fullchain.cer;
    ssl_certificate_key /etc/nginx/ssl/*.ocet.com.cn_ocet.com.cn_2048/private.key;

    location / {
        proxy_set_header    Host                $host;
        proxy_set_header    X-Real-IP           $remote_addr;
        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto   $scheme;
        proxy_http_version  1.1;
        proxy_set_header    Upgrade             $http_upgrade;
        proxy_set_header    Connection          $connection_upgrade;
        proxy_pass          http://127.0.0.1:9000/;
        proxy_set_header Upgrade '';
        proxy_set_header Connection '';
        proxy_cache off;
        proxy_buffering off;

    }
}
```this is right one

_http2   on;_is not allowed

@Altria-Pendr commented on GitHub (May 18, 2025): ``` server { listen 80; listen [::]:80; server_name server_name; rewrite ^(.*)$ https://$host$1 permanent; } map $http_upgrade $connection_upgrade { default upgrade; '' close; } server { listen 443 ssl http2; listen [::]:443 ssl; server_name server_name ; ssl_certificate /etc/nginx/ssl/*.ocet.com.cn_ocet.com.cn_2048/fullchain.cer; ssl_certificate_key /etc/nginx/ssl/*.ocet.com.cn_ocet.com.cn_2048/private.key; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_pass http://127.0.0.1:9000/; proxy_set_header Upgrade ''; proxy_set_header Connection ''; proxy_cache off; proxy_buffering off; } } ```this is right one _http2 on;_is not allowed

kerem commented

2026-03-01 15:37:56 +03:00

Author

Owner

@0xJacky commented on GitHub (May 19, 2025):

Hello, this is due to a problem with the Nginx version. For versions v1.25.1 and above, use "http2 on"; for older versions, use "listen 443 ssl http2";

For more details, please check: https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2

@0xJacky commented on GitHub (May 19, 2025): Hello, this is due to a problem with the Nginx version. For versions v1.25.1 and above, use "http2 on"; for older versions, use "listen 443 ssl http2"; For more details, please check: https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2