MeshCentral: Web-Relay - not found

Describe the bug I set up a new webrelay function, but when I try to open it, it gives Not Found

Screenshots

Server Software (please complete the following information):

• OS: Debian 10
• Virtualization: no, npm install
• Network: Hybrid, reverse proxy NGINX, tls offload on Nginx
• Version: 1.0.48
• Node: v16.14.1
• Browser: Google Chrome

Remote Device (please complete the following information):

• Device: VM
• OS: Debian
• Version: 10
• Current Core Version (if known): Apr 4 2022, 2198572183

Additional context Add any other context about the problem here.

Your config.json file

{
  "$schema": "http://info.meshcentral.com/downloads/meshcentral-config-schema.json",
  "__comment1__": "This is a simple configuration file, all values and sections that start with underscore (_) are ignored. Edit a section and remove the _ in front of the name. Refer to the user's guide for details.",
  "__comment2__": "See node_modules/meshcentral/sample-config-advanced.json for a more advanced example.",
  "settings": {
    "cert": "rm.company.ru",
    "relayDNS": "relay.rm.company.ru",
    "MongoDb": "mongodb://127.0.0.1:27017/meshcentral",
    "_WANonly": true,
    "_LANonly": true,
    "port": 443,
    "aliasPort": 443,
    "redirPort": 80,
    "redirAliasPort": 80,
    "relayPort": 453,
    "relayAliasPort": 443,
    "browserPing": 60,
    "browserPong": 30,
    "AgentPong": 30,
    "manageAllDeviceGroups": [ "user//admin" ],
    "manageCrossDomain": [ "user//admin" ],
    "tlsOffload": "192.168.XXX.XXX",
    "trustedProxy": "192.168.XXX.XXX",
    "Compression": true,
    "WsCompression": true,
    "AgentWsCompression": true,
    "desktopMultiplex": true,
    "allowHighQualityDesktop": true,
  },
  "domains": {
    "": {
      "_siteStyle":  1,
      "title": "Remote Access System",
      "title2": "B2B Cluster",
      "minify": true,
      "newAccounts": false,
      "hide": 5,
      "agentNoProxy": false,
      "novnc": true,
      "mstsc": true,
      "ssh": true,
      "CertUrl": "https://rm.company.ru:443/",
      "AutoRemoveInactiveDevices": 45,
      "myServer": {
        "Backup": true,
        "Restore": true,
        "Upgrade": true,
        "ErrorLog": true,
        "Console": true,
        "Trace": true
      },
      "unknownUserRootRedirect": "https://rm.company.ru/auth-azure",
      "DeviceSearchBarServerAndClientName": true,
      "authStrategies": {
        "azure": {
          "callbackurl": "https://rm.company.ru/auth-azure-callback",
          "newAccountsRights": [ "nonewgroups", "notools" ],
          "newAccounts": true,
          "clientid": "XXXXXXX",
          "clientsecret": "XXXXXXX",
          "tenantid": "XXXXX"
        },
      },
      "deviceMeshRouterLinks": {
        "rdp": true,
        "ssh": true,
        "scp": true,
        "extralinks": [
          {
            "name": "MCRDesk",
            "protocol": "mcrdesktop"
          },
          {
            "name": "MCRFiles",
            "protocol": "mcrfiles"
          },
          {
            "name": "PVE",
            "protocol": "https",
            "port": 8006,
            "filter": [ "tag:PVE" ]
          },
          {
            "name": "PVEBKP",
            "protocol": "https",
            "port": 8007,
            "filter": [ "tag:PVEBKP" ]
          },
          {
            "name": "Winbox",
            "protocol": "custom",
            "port": 8291,
            "filter": [ "tag:MIKROTIK" ]
          }
        ]
      },
      "userSessionIdleTimeout": 60,
      "terminal": {
        "_linuxshell": "login",
        "launchCommand": {
          "linux": "su -\n",
          "_darwin": "clear\necho \"Hello MacOS\"\n",
          "_freebsd": "clear\necho \"Hello FreeBSD\"\n"
        }
      }
    }
  },
  "_letsencrypt": {
    "__comment__": "Requires NodeJS 8.x or better, Go to https://letsdebug.net/ first before trying Let's Encrypt.",
    "email": "myemail@mydomain.com",
    "names": "myserver.mydomain.com",
    "production": false
  }
}

NGINX config

server {
        listen 443 ssl;
        server_name rm.company.ru relay.rm.company.ru;

        proxy_send_timeout 330s;
        proxy_read_timeout 330s;

        location / {
                proxy_pass http://10.10.1.208:443/;
                proxy_http_version 1.1;

                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_set_header Host $host;

                proxy_set_header X-Forwarded-Host $host:$server_port;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-NginX-Proxy true;
       }

    ssl_certificate /etc/letsencrypt/live/rm.company.ru/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/rm.company.ru/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}