Failure when using wss:// connection with laravel-websocket package behind nginx proxy

Question

I am using dockerized environment for laravel project. Everything is glued by nginx proxy. There is additional docker container to run laravel-websockets server. It works when I try to connect to it using postman. It connects, I cand send message to subscribe, it even receives broadcasted events. The issue is both firefox and vivaldi (chromium based) cant connect to it.

Firefox can’t establish a connection to the server at wss://****:6001/app/pusher-key?protocol=7&client=js&version=4.3.1&flash=false.

Apart from laravel websockets I tried soketi but same thing. Nginx proxy I used https://github.com/nginx-proxy/nginx-proxy Websockets are handled by https://github.com/beyondcode/laravel-websockets Certificates are self signed but they do work in Postman, no idea why browser has issues D :

Here is addition to nginx proxy template

location /app {
     proxy_pass             https://127.0.0.1:6001;
     proxy_set_header Host  $host;
     proxy_read_timeout     60;
     proxy_connect_timeout  60;
     proxy_redirect         off;

     # Allow the use of websockets
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection 'upgrade';
     proxy_set_header Host $host;
     proxy_cache_bypass $http_upgrade;
}

Packages used Composer

        "beyondcode/laravel-websockets": "^1.13",
        "pusher/pusher-php-server": "~7.0.2",

npm

     "pusher-js": "^5.1.1",

broadcasting.php

    'connections' => [
        'pusher' => [
            'driver' => 'pusher',
            'key' => env('PUSHER_APP_KEY','app-key'),
            'secret' => env('PUSHER_APP_SECRET','app-secret'),
            'app_id' => env('PUSHER_APP_ID','app-id'),
            'options' => [
                'host' => env('PUSHER_HOST', '127.0.0.1'),
                'port' => env('PUSHER_PORT', 6001),
                'scheme' => 'http',
                'encrypted' => false,
                'useTLS' => false,
                'cluster' => 'mt1',
                'curl_options' => [
                    CURLOPT_SSL_VERIFYHOST => 0,
                    CURLOPT_SSL_VERIFYPEER => 0,
                ]
            ],
        ],

websockets.php

<?php
return [

    /*
     * This package comes with multi tenancy out of the box. Here you can
     * configure the different apps that can use the webSockets server.
     *
     * Optionally you can disable client events so clients cannot send
     * messages to each other via the webSockets.
     */
    'apps' => [
        [
            'id' => env('PUSHER_APP_ID'),
            'name' => env('APP_NAME'),
            'key' => env('PUSHER_APP_KEY'),
            'secret' => env('PUSHER_APP_SECRET'),
            'enable_client_messages' => false,
            'enable_statistics' => true,
        ],
    ],

    /*
     * This class is responsible for finding the apps. The default provider
     * will use the apps defined in this config file.
     *
     * You can create a custom provider by implementing the
     * `AppProvider` interface.
     */
    'app_provider' => BeyondCode\LaravelWebSockets\Apps\ConfigAppProvider::class,

    /*
     * This array contains the hosts of which you want to allow incoming requests.
     * Leave this empty if you want to accept requests from all hosts.
     */
    'allowed_origins' => [
        //
    ],

    /*
     * The maximum request size in kilobytes that is allowed for an incoming WebSocket request.
     */
    'max_request_size_in_kb' => 250,

    /*
     * This path will be used to register the necessary routes for the package.
     */
    'path' => 'laravel-websockets',

    'statistics' => [
        /*
         * This model will be used to store the statistics of the WebSocketsServer.
         * The only requirement is that the model should extend
         * `WebSocketsStatisticsEntry` provided by this package.
         */
        'model' => \BeyondCode\LaravelWebSockets\Statistics\Models\WebSocketsStatisticsEntry::class,

        /*
         * Here you can specify the interval in seconds at which statistics should be logged.
         */
        'interval_in_seconds' => 60,

        /*
         * When the clean-command is executed, all recorded statistics older than
         * the number of days specified here will be deleted.
         */
        'delete_statistics_older_than_days' => 60,

        /*
         * Use an DNS resolver to make the requests to the statistics logger
         * default is to resolve everything to 127.0.0.1.
         */
        'perform_dns_lookup' => false,
    ],

    /*
     * Define the optional SSL context for your WebSocket connections.
     * You can see all available options at: http://php.net/manual/en/context.ssl.php
     */
    'ssl' => [
        /*
         * Path to local certificate file on filesystem. It must be a PEM encoded file which
         * contains your certificate and private key. It can optionally contain the
         * certificate chain of issuers. The private key also may be contained
         * in a separate file specified by local_pk.
         */
        'local_cert' => storage_path('certificates/default.crt'),

        /*
         * Path to local private key file on filesystem in case of separate files for
         * certificate (local_cert) and private key.
         */
        'local_pk' => storage_path('certificates/default.key'),

        /*
         * Passphrase for your local_cert file.
         */
        'passphrase' => null
    ],
];