Websocket using official docker image and nginx

[SkylerK-GG]

Hello all,

I have inherited a mostly set up and in use espo instance at my company, and am attempting to get websockets working on it. The compose.yml is based on the one on the page for the official docker espo image, with the addition of a phpmyadmin container, as follows:

services:

  espocrm-db:
    image: mariadb:latest
    container_name: espocrm-db
    environment:
      MARIADB_ROOT_PASSWORD: [REDACTED]
      MARIADB_DATABASE: espocrm
      MARIADB_USER: espocrm
      MARIADB_PASSWORD: [REDACTED]
    volumes:
      - espocrm-db:/var/lib/mysql
    restart: always
    healthcheck:
      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
      interval: 20s
      start_period: 10s
      timeout: 10s
      retries: 3
    ports:
      - 8956:3306

  espocrm:
    image: espocrm/espocrm
    container_name: espocrm
    environment:
      ESPOCRM_DATABASE_PLATFORM: Mysql
      ESPOCRM_DATABASE_HOST: espocrm-db
      ESPOCRM_DATABASE_USER: espocrm
      ESPOCRM_DATABASE_PASSWORD: [REDACTED]
      ESPOCRM_ADMIN_USERNAME: admin
      ESPOCRM_ADMIN_PASSWORD: [REDACTED]
      ESPOCRM_SITE_URL: "https://espo.[COMPANYSITE].com"
    volumes:
      - espocrm:/var/www/html
    restart: always
    depends_on:
      espocrm-db:
        condition: service_healthy
    ports:
      - 8888:80

  espocrm-phpmyadmin:
    image: phpmyadmin/phpmyadmin
    container_name: espocrm-phpmyadmin
    links:
      - espocrm-db
    environment:
      PMA_HOST: espocrm-db
      PMA_PORT: 3306
      PMA_ARBITRARY: 1
    restart: always
    ports:
      - 8583:80


  espocrm-daemon:
    image: espocrm/espocrm
    container_name: espocrm-daemon
    volumes:
      - espocrm:/var/www/html
    restart: always
    entrypoint: docker-daemon.sh

  espocrm-websocket:
    image: espocrm/espocrm
    container_name: espocrm-websocket
    environment:
      ESPOCRM_CONFIG_USE_WEB_SOCKET: "true"
      ESPOCRM_CONFIG_WEB_SOCKET_URL: "wss://espo.[COMPANYSITE].com:8081"
      ESPOCRM_CONFIG_WEB_SOCKET_ZERO_M_Q_SUBSCRIBER_DSN: "tcp://*:7777"
      ESPOCRM_CONFIG_WEB_SOCKET_ZERO_M_Q_SUBMISSION_DSN: "tcp://espocrm-websocket:7777"
    volumes:
      - espocrm:/var/www/html
    restart: always
    entrypoint: docker-websocket.sh
    ports:
      - 8081:8080




volumes:
  espocrm-db:
  espocrm:

There is also an Nginx Proxy Manager instance, which has separate proxy hosts defined for the espo application and the websocket connection.

The error I'm getting in the web console for the websockets is this:

autobahn.js:341WebSocket connection to 'wss://espo.[COMPANYSITE].com:8081/?authToken=e0e4afb…&userId=682dff6b85b8b6ef6' failed:
  ab.Session @ autobahn.js:341

Which, when clicked provides the following additional info:

Could not load content for https://espo.[COMPANYSITE].com/client/lib/original/autobahn.js (HTTP error: status code 404, net::ERR_HTTP_RESPONSE_CODE_FAILURE)

I'm at the very edge of my depth here, and I'm not sure what all information might be needed to figure this one out. Please let me know what else might be needed.

[tgr]

If you open the network tab in the web console and locate the wss connection there, what do you see?
Can you run the following command, what is the output?

curl -v -H "Upgrade: websocket" -H "Connection: Upgrade" -H "Sec-WebSocket-Version: 13" -H "Sec-WebSocket-Protocol: wamp" -H "Sec-WebSocket-Key: yqCENxArRr1WR3Z0OUzxbw==" your url here

On a side note, I see that you have mapped a port for MariaDB. Do you really mean to expose the database directly outside your Compose stack? Containers within the same compose file can communicate via with each other without mapping ports to the outer world.

[SkylerK-GG]

Thanks for pointing that port out, was put there to test something before and never removed afterwards.

Here is what I get from curl:

*   Trying [COMPANYIP]:80...
* Connected to espo.[COMPANYSITE].com ([COMPANYIP]) port 80 (#0)
> GET / HTTP/1.1
> Host: espo.[COMPANYSITE].com
> User-Agent: curl/7.81.0
> Accept: */*
> Upgrade: websocket
> Connection: Upgrade
> Sec-WebSocket-Version: 13
> Sec-WebSocket-Protocol: wamp
> Sec-WebSocket-Key: yqCENxArRr1WR3Z0OUzxbw==
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 301 Moved Permanently
< Server: openresty
< Date: Tue, 18 Nov 2025 18:43:17 GMT
< Content-Type: text/html
< Content-Length: 166
< Connection: keep-alive
< Location: https://espo.[COMPANYSITE].com/
<
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>openresty</center>
</body>
</html>

[tgr]

My bad. You should point the curl command towards your websocket endpoint, not the website. IIUC, we should see the server reply with a 101 switching protocols