teward Wrote:
-------------------------------------------------------
> This works fine if
> the web frontend is open to all, but we want to restrict it so that
> only one WSS pathway can actually be used and no other WSS requests
> work.

To clarify, there's a separate `server { }` block handling the gateway separate from the RDWeb ingress point. This is necessary for the wss links to work. Unfortunately, we need to control what wss / request paths are used on there and currently don't have a way to do this that I'm aware of - can we configure that nginx server block for the gateway component to do what we need?