- Shipped
- April 26, 2026 at 8:53 PM UTC
- Author
- Kamo
- Commit
- 7f3276a
Browsers refused the WebSocket connection to **************** with close code 1006 because Traefik was serving its self-signed default cert for that hostname (not covered by the Let's Encrypt cert that handles the other kamocrm.com endpoints). curl had been working only because we tested with -k. Move the browser-facing WSS endpoint to internal.kamocrm.com/voip-ws — same cert that already secures internal.kamocrm.com — and add a Traefik middleware that rewrites /voip-ws back to /ws so Asterisk's res_http_websocket can serve it from its registered URI. The pbx.k1.kluster.kamocrm.com/ws route stays in place for cluster-internal smoke tests.