diff --git a/docker/nginx.conf b/docker/nginx.conf
index 91442bc9..62503040 100644
--- a/docker/nginx.conf
+++ b/docker/nginx.conf
@@ -8,6 +8,31 @@ server {
     charset utf-8;
     client_max_body_size 1G;
 
+    # Reverb WebSocket (Pusher protocol). The browser connects to
+    # wss://<host>/app/<key>; the broadcaster REST API lives under /apps/.
+    # Both are proxied to the in-container Reverb on 127.0.0.1:8080.
+    location /app/ {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 86400s;
+    }
+
+    location /apps/ {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
     location / {
         try_files $uri $uri/ /index.php?$query_string;
     }