The Security Middleware Blocked the Real Agent with a 403
A Host allowlist added for DNS rebinding protection blocked a valid custom domain because env config and dashboard config had drifted apart.
Blog
Tag: self-hosting Clear
The Inbox Filled Up, but Nobody Woke Up - The Day a Reverse Proxy Ate the SSE Stream
Messages were delivered, but wake notifications never reached agents. A reverse proxy was buffering the SSE stream. The fix was X-Accel-Buffering: no.