Failing to setup an apache ssl reverse proxy with rocketchat dockerized instance

[guymarc]

Following https://docs.rocket.chat/deploy/deploy-rocket.chat/deploy-with-docker-and-docker-compose
I have a running docker instance on *:3000, which works when connected with http

I am trying to setup an apache2 ssl reverse proxy for this service following
https://docs.rocket.chat/setup-and-configure/rocket.chat-environment-configuration/configuring-ssl-reverse-proxy
I am not confident on my skills with modrewrite nor with websockets, so I do not know what to do

I am stuck with a 502 error

docker logs rocketchat-rocketchat-1, nothing more
+----------------------------------------------+ | SERVER RUNNING | +----------------------------------------------+ | | | Rocket.Chat Version: 6.3.3 | | NodeJS Version: 14.21.3 - x64 | | MongoDB Version: 5.0.20 | | MongoDB Engine: wiredTiger | | Platform: linux | | Process Port: 3000 | | Site URL: http://localhost:3000 | | ReplicaSet OpLog: Enabled | | Commit Hash: 3826f7e5f3 | | Commit Branch: HEAD | | | +----------------------------------------------+

My apache conf
` <VirtualHost *:443>
ServerName www.domain.com

    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/www.domain.com/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/www.domain.com/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/www.domain.com.com/fullchain.pem
    Include /etc/letsencrypt/options-ssl-apache.conf

LogLevel debug
ErrorLog /var/log/apache2/wdc_error.log
TransferLog /var/log/apache2/wdc_access.log

<Location />
    Require all granted
</Location>

ProxyPreserveHost On

RewriteEngine On
RewriteCond %{HTTP:CONNECTION} Upgrade [NC]
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /(.*)           ws://127.0.0.1:3000/$1 [P,L]
RewriteCond %{HTTP:Upgrade} !=websocket [NC]
RewriteRule /(.*)           http://127.0.0.1:3000/$1 [P,L]

ProxyPassReverse / http://127.0.0.1:3000/

`

The apache error debug log shows (real hostname replaced by www.domain.com)
[Wed Sep 06 15:14:01.911479 2023] [ssl:debug] [pid 1324957] ssl_engine_kernel.c(415): [client 82.66.42.153:6578] AH02034: Initial (No.1) HTTPS request received for child 4 (server www.domain.com:443) [Wed Sep 06 15:14:01.911530 2023] [authz_core:debug] [pid 1324957] mod_authz_core.c(815): [client 82.66.42.153:6578] AH01626: authorization result of Require all granted: granted [Wed Sep 06 15:14:01.911541 2023] [authz_core:debug] [pid 1324957] mod_authz_core.c(815): [client 82.66.42.153:6578] AH01626: authorization result of <RequireAny>: granted [Wed Sep 06 15:14:01.911587 2023] [proxy:debug] [pid 1324957] mod_proxy.c(1511): [client 82.66.42.153:6578] AH01143: Running scheme http handler (attempt 0) [Wed Sep 06 15:14:01.911601 2023] [proxy_fcgi:debug] [pid 1324957] mod_proxy_fcgi.c(1069): [client 82.66.42.153:6578] AH01076: url: http://127.0.0.1:3000/ proxyname: (null) proxyport: 0 [Wed Sep 06 15:14:01.911610 2023] [proxy_fcgi:debug] [pid 1324957] mod_proxy_fcgi.c(1074): [client 82.66.42.153:6578] AH01077: declining URL http://127.0.0.1:3000/ [Wed Sep 06 15:14:01.911643 2023] [proxy:debug] [pid 1324957] proxy_util.c(2568): AH00942: http: has acquired connection for (127.0.0.1:3000) [Wed Sep 06 15:14:01.911654 2023] [proxy:debug] [pid 1324957] proxy_util.c(2626): [client 82.66.42.153:6578] AH00944: connecting http://127.0.0.1:3000/ to 127.0.0.1:3000 [Wed Sep 06 15:14:01.911748 2023] [proxy:debug] [pid 1324957] proxy_util.c(2849): [client 82.66.42.153:6578] AH00947: connected / to 127.0.0.1:3000 [Wed Sep 06 15:14:01.911905 2023] [proxy:debug] [pid 1324957] proxy_util.c(3321): AH02824: http: connection established with 127.0.0.1:3000 (127.0.0.1:3000) [Wed Sep 06 15:14:01.911931 2023] [proxy:debug] [pid 1324957] proxy_util.c(3510): AH00962: http: connection complete to 127.0.0.1:3000 (127.0.0.1) [Wed Sep 06 15:14:01.912240 2023] [proxy_http:error] [pid 1324957] (104)Connection reset by peer: [client 82.66.42.153:6578] AH01102: error reading status line from remote server 127.0.0.1:3000 [Wed Sep 06 15:14:01.912289 2023] [proxy_http:debug] [pid 1324957] mod_proxy_http.c(1187): [client 82.66.42.153:6578] AH01105: NOT Closing connection to client although reading from backend server 127.0.0.1:3000 failed. [Wed Sep 06 15:14:01.912301 2023] [proxy:error] [pid 1324957] [client 82.66.42.153:6578] AH00898: Error reading from remote server returned by / [Wed Sep 06 15:14:01.912309 2023] [proxy:debug] [pid 1324957] proxy_util.c(2584): AH00943: http: has released connection for (127.0.0.1:3000)

Guy