Figured it out. its the `Content-Security-Policy: upgrade-insecure-requests` header https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests
i am debugging why clients are not connecting to my relay, and comparing nostrudel production vs next version:
if i'm not mistaken, it looks like next version (and this is probably the same with primal and coracle, which also don't talk to my relay anymore) is messing up the TLS/SSL and asking for a secure connection even though the URL protocol i see in the source code says `ws://` for the local relay
nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr any idea what is going on here? it looks like this is actually kinda wrong that it's trying to connect using SSL when the protocol is not SSL nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft and whoever else works on NDK, dis you guys?
Discussion
yeah, no way no how to make brave relax that setting for some reason... so i've just got firefox, with a little "standalone app" extension enabled and running the current version of nostrudel with my baked in defaults and the cache relay enabled, runs beautifully and it's actually for sure faster than brave at rendering
I'm going to fix it, CSP headers are actively hostile to open source apps. the issue is my hosting provider wont let me change the headers and I cant find another one that does not require tons of KYC
well, it's not critical it just nerfs that feature on chrome based browsers it looks like, for some reason firefox is fine so i'm running that... and also yes, the production version doesn't have issues with my relay connections, but both next and several others do
for this reason in our work we are gonna stick with this current version of nostrudel production until some other solution comes up... i still haven't checked my reverse proxy isn't involved yet either
also, perhaps consider the possibility of making an electron desktop version, then you can bundle in a full blown relay like strfry... i'm very much preferring how fast this is with replicatr backing the event store
I've thought about this. but If I'm building a full desktop app and the only feature I add is a system level relay then it wont really be worth it.
If I where to build a desktop app I would want the majority of the logic to be run at the system level and not in the web view