FYI: blocking /health API endpoint causes critical UI issues

[jerkstorecaller]

Just posting this in case it helps others.

At one point after an update Librechat became unusable for me, I posted about it here: #4626 (but don't read that link for info, it's out-of-date and I was just logging random info, I have now found the issue)

My setup is Librechat behind nginx acting as reverse proxy. nginx uses basic_auth, with everything password-protected except some whitelisted endpoints. I do this because I'm not an IT guy, and I don't want to worry about cybersecurity: I want to set up a server once, and forget about it, without any risk of being hacked (basic_auth + fail2ban ensures that).

To get to the point, if you're running into any of these issues:

• Deleted chats dont disappear unless you refresh
• In new chat, LLM reply doesnt appear unless you refresh
• Follow-up questions cant be submitted unless you switch chats and return

The culprit is a new /health API endpoint added in 0.7.6. Don't ask me why something so innucuous-sounding breaks the UI if it's blocked, it just does, and whitelisting it fixed all these problems for me. If you have the same basic_auth setup as me, and are reading this in the future and something else is broken, open your browser console and look for any 401 Unauthorized, that's probably a new endpoint you need to whitelist.

Corrected nginx.conf configuration:

  #https://gpt.domain.com
  server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name gpt.*;
    include /config/nginx/ssl.conf;

    location / {
      auth_basic "Restricted";
      auth_basic_user_file /config/nginx/.htpasswd;
      include /config/nginx/proxy_params.conf;
      proxy_pass http://LibreChat:3080;
    }

    #/api uses Librechat's bearer auth or it doesn't work
    location ~ ^/api/ {
      auth_basic off;
      include /config/nginx/proxy_params.conf;
      proxy_pass http://LibreChat:3080;
    }

    #Since 0.7.5 this is needed
    location ~ ^/c/ {
      auth_basic off;
      include /config/nginx/proxy_params.conf;
      proxy_pass http://LibreChat:3080;
    }
	
    location ~ ^/assets/ {
      auth_basic off;
      include /config/nginx/proxy_params.conf;
      proxy_pass http://LibreChat:3080;
    }

    #Since Librechat 0.7.6
    location /health {
      auth_basic off;
      include /config/nginx/proxy_params.conf;
      proxy_pass http://LibreChat:3080;
    }
  }