Skip to content

Network gateways

Relay can expose preconfigured IRC networks while preventing users from editing connection or proxy details.

Set lockNetwork: true for a controlled deployment. Users can still use the network, but cannot change its server, transport, or gateway configuration. Public mode enforces the same boundary automatically and hides configured transport credentials.

When operating behind a reverse proxy:

  • terminate TLS with a certificate valid for Relay's public hostname;
  • forward WebSocket upgrades and the original scheme;
  • restrict direct access to Relay's listening port; and
  • set trusted-proxy behavior narrowly rather than trusting arbitrary client headers.

Gateway-specific connection behavior can affect replies and reactions. Review Compatibility and limitations.

Use the complete HTTPS and reverse proxy example for listener and trusted-proxy configuration.