Hello, I am writing to you because I have been stuck for many hours and I am desperate.
Here is a brief description of my configuration:
• Ntfy running on Docker on my QNAP NAS
• Port forwarding 8888 443 in openwrt
• Server published on the internet with the URL https://domain:8888 and that same URL configured in ntfy.
• “ip_router domain” in /etc/hosts
• Server.yml from ntfy:
base-url: "https://domain:8888"
auth-default-access: "write-only"
listen-https: ":443"
key-file: "/etc/stunnel/backup.key"
cert-file: "/etc/stunnel/backup.cert"
cache-file: "/var/cache/ntfy/cache.db"
visitor-request-limit: 0
auth-default-access: "rw"
default-visibility: "public"
keepalive-interval: "60s"
manager-interval: "5m"
log-level: debug
The topics are created by Telegram/Molly and correctly connected in Ntfy. If I create a topic and enter https://dominio:8888/topic from the browser, I can send messages and Ntfy receives them, but Ntfy never receives messages from Telegram or Molly (in the UP configuration status it indicates Status: Accept).
UnifiedPush configured in Telegram and Molly, with https://dominio:8888 and unrestricted background activity.
Evidence.
• The logs show that the topics are active and the recipients are listening:
INFO Server stats (emails_received=0, emails_received_failure=0, emails_received_success=0, emails_sent=0, emails_sent_failure=0, emails_sent_success
=0, messages_cached=5, messages_published=36, subscribers=4, tag=manager, topics_active=7, users=0, visitors=2)
• curl -k https://hostname:port/json | grep -i subscriber -> get 0
• curl -k -N -H "Authorization: Bearer tu_token_si_usas" https://hostname:port/topic/json -> show json correctly
• Some suspicious traces:
INFO WebSocket error: read tcp 10.0.3.2:443-> ip_ntfy:48798: read: connection reset by peer (error=read tcp 10.0.3.2:443->ip_ntfy:48798: read: connection reset by peer, http_method=GET, http_path=/telegr/ws?since=topic, tag=websocket, visitor_auth_limiter_limit=0.016666666666666666, visitor_auth_limiter _tokens=30, visitor_id=ip:ip_ntfy, visitor_ip= ip_ntfy, visitor_messages=1, visitor_messages_limit=17280, visitor_messages_remaining=17279, visitor_request_limite r_limit=0.2, visitor_request_limiter_tokens=38.952726460400015, visitor_seen=2026-02-02T07:49:01.647Z) 2026/02/02 07:49:01 http: response.WriteHeader on hijacked connection from heckel.io/ntfy/v2/server.(*Server).handleError (server.go:437)
I don't know what else to do. The AI suggests that I configure WebSocket headers in openwrt or qnap nas, but I find it confusing and don't know if it will work.
Thank you very much for your attention and help.