Unless something has changed Umbrel doesn't use a secure socket (wss://) but an insecure one (ws://). Web browsers won't let a sight running on a secure connection (https:) connect to an insecure socket.