# Can\`t connect ONLYOFFICE from Nextcloud in docker **URL:** \ **Category:** 📄 Office\ **Tags:** onlyoffice\ **Created:** [September 3, 2018, 5:58pm UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135 "2018-09-03T17:58:29Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![Azathoth\_Nie](https://help.nextcloud.com/letter_avatar/azathoth_nie/32/5_5575768a8748004e209b776fc1b2916d.png) [@Azathoth\_Nie](https://help.nextcloud.com/u/Azathoth_Nie)\ **Post date:** [September 3, 2018, 5:58pm UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/1 "2018-09-03T17:58:30Z")
Nextcloud version---------------------Docker pull nextcloud Operating system and version-----Debian GNU/Linux 9 (stretch) Web server------------------------------Caddy in docker Docker version-------------------------18.06.0-ce Hi, I am tring to connect OnlyOffice from Nextcloud.Both OnlyOffice and Nextcloud are running in docker. I am using portainer and running OnlyOffice with selecting interactive mode and TTY (-i -t) and using HTTPS.Now everything is running well.But I just can`t connect OnlyOffice from the nextcloud.The note said ``` Error when trying to connect (Bad Request or timeout error) ``` I am 100% sure both the containers are in one docker network.And in the OnlyOffice container the nginx is running well. Because I am running other sites on the server,so I am running a Caddy docker as proxy.So there are 4 containers running and they are all in the same network. | Container | Note | | --- | --- | | Caddy docker | As proxy | | Nextcloud | Full version with Apache inside | | Mysql | Database | | Onlyoffice | Fulle version with everthing inside | **The Caddyfile looks like this:** ``` [nextcloud.url.me] { gzip proxy / 172.17.0.4:80 { websocket transparent } } ``` As the Onlyoffice container\s IP is 172.17.0.6,so I enter `https://172.17.0.6` in the Onlyoffice settings,but that does not work. **The OnlyOffice container ENV details are here.** | Name | Value | | --- | --- | | PATH | /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin | | LANG | en\_US.UTF-8 | | LANGUAGE | en\_US:en | | LC\_ALL | en\_US.UTF-8 | | DEBIAN\_FRONTEND | noninteractive | | ONLYOFFICE\_HTTPS\_HSTS\_ENABLED | true | | SSL\_CERTIFICATE\_PATH | /var/www/onlyoffice/Data/certs/onlyoffice.crt | | SSL\_KEY\_PATH | /var/www/onlyoffice/Data/certs/onlyoffice.key | | SSL\_DHPARAM\_PATH | /var/www/onlyoffice/Data/certs/dhparam.pem | **The log in Nextcloud is here.** | Log | | | | --- | --- | --- | | Error | onlyoffice | HealthcheckRequest on check error: Bad Request or timeout error | | Error | PHP | file\_get\_contents([https://172.17.0.6/healthcheck](https://172.17.0.6/healthcheck)): failed to open stream: operation failed at /var/www/html/custom\_apps/onlyoffice/lib/documentservice.php#381 | | Error | PHP | file\_get\_contents(): Failed to enable crypto at /var/www/html/custom\_apps/onlyoffice/lib/documentservice.php#381 | | Error | PHP | file\_get\_contents(): SSL operation failed with code 1. OpenSSL Error messages: error:1416F086:SSL routines:tls\_process\_server\_certificate:certificate verify failed at /var/www/html/custom\_apps/onlyoffice/lib/documentservice.php#381 | I have tried to fix this issue but failed.Can somebody help me? ---
**Author:** ![Azathoth\_Nie](https://help.nextcloud.com/letter_avatar/azathoth_nie/32/5_5575768a8748004e209b776fc1b2916d.png) [@Azathoth\_Nie](https://help.nextcloud.com/u/Azathoth_Nie)\ **Post date:** [September 4, 2018, 1:45pm UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/2 "2018-09-04T13:45:14Z")
Have fixed it by myself. ---
**Author:** ![iamdoubz](https://help.nextcloud.com/user_avatar/help.nextcloud.com/iamdoubz/32/7384_2.png) [@iamdoubz](https://help.nextcloud.com/u/iamdoubz)\ **Post date:** [September 13, 2018, 7:00pm UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/3 "2018-09-13T19:00:47Z")
So, I struggled for a very long time to get ONLYOFFICE to work. So, I want to put here what I did. **Assumptions:** 1. Nextcloud 13.0.\* 2. Had a working Collabora docker installed 3. Using apache2 reverse proxy to connect to ONLYOFFICE docker container 4. You’ve installed postgresql at some point in time **How to install:** NOTE: There is a lot of info, and a lot of it is noise and not simple to understand. 1. Install the docker container ` sudo docker pull onlyoffice/documentserver` 2. Create these directories ` sudo mkdir -p /var/log/onlyoffice` ` sudo mkdir -p /var/lib/onlyoffice` 3. Start ONLYOFFICE container ` sudo docker run -i -t -d --restart=always -p 127.0.0.1:9981:80 -p 127.0.0.1:9982:443 -v /app/onlyoffice/DocumentServer/logs:/var/log/onlyoffice -v /app/onlyoffice/DocumentServer/lib:/var/lib/onlyoffice -v /app/onlyoffice/DocumentServer/db:/var/lib/postgresql onlyoffice/documentserver` 4. Make your onlyoffice.conf file ` ### \< IfModule mod\_ssl.c \> ``` ServerTokens Prod SSLStaplingCache "shmcb:${APACHE_LOG_DIR}/stapling-cache(150000)" SSLSessionCache "shmcb:${APACHE_LOG_DIR}/ssl_scache(512000)" SSLSessionCacheTimeout 300 ``` \ ### Basic Info ``` ServerName ds.server.name ServerAdmin support@ds.server.name ErrorLog ${APACHE_LOG_DIR}/ds.server.name.error.log CustomLog ${APACHE_LOG_DIR}/ds.server.name.access.log combined ``` ### SSL Info ``` SSLEngine On SSLCertificateFile /etc/letsencrypt/live/ds.server.name/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/ds.server.name/privkey.pem Include /etc/letsencrypt/options-ssl-apache.conf ``` ### Security Hardening ``` SSLProxyEngine On AddDefaultCharset utf-8 HostnameLookups Off UseCanonicalName Off ProxyBadHeader Ignore KeepAlive Off ProxyPreserveHost On ProxyRequests Off ProxyTimeout 600 ProxyReceiveBufferSize 4096 SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4 SSLProtocol All -SSLv2 -SSLv3 SSLCompression Off SSLHonorCipherOrder On #Header always set Strict-Transport-Security "max-age=11536000; #Header set X-Content-Type-Options "nosniff" #RequestHeader unset Accept-Encoding ``` ### Magic stuff from: [document-server-proxy/apache/proxy-https-to-http.conf at master · ONLYOFFICE/document-server-proxy · GitHub](https://github.com/ONLYOFFICE/document-server-proxy/blob/master/apache/proxy-https-to-http.conf) ``` SetEnvIf Host "^(.*)$" THE_HOST=$1 RequestHeader setifempty X-Forwarded-Proto https RequestHeader setifempty X-Forwarded-Host %{THE_HOST}e ProxyAddHeaders Off ``` ### If you used a different port, be sure to change 9981 ``` ProxyPassMatch (.*)(\/websocket)$ "ws://127.0.0.1:9981/$1$2" ProxyPass / "http://127.0.0.1:9981/" ProxyPassReverse / "http://127.0.0.1:9981/" ``` ### Since ONLYOFFICE is not SSL (using 9981-\>80) ``` SSLProxyVerify none SSLProxyCheckPeerCN off SSLProxyCheckPeerName off SSLProxyCheckPeerExpire off ``` \< /VirtualHost\> \< /IfModule\>` 1. If you have access to a browser from the local machine, type ` [http://127.0.0.1:9981/](http://127.0.0.1:9981/) 2. Should get 3. Add your ds domain to Nextcloud i.e. ds.server.name 4. Should be good to go! ---
**Author:** ![zgq19941223](https://help.nextcloud.com/user_avatar/help.nextcloud.com/zgq19941223/32/11348_2.png) [@zgq19941223](https://help.nextcloud.com/u/zgq19941223)\ **Post date:** [October 14, 2018, 9:20am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/4 "2018-10-14T09:20:36Z")
hello , I have met the same question as you, so I want to know how you solve it. Really hope to receive your help. ---
**Author:** ![zgq19941223](https://help.nextcloud.com/user_avatar/help.nextcloud.com/zgq19941223/32/11348_2.png) [@zgq19941223](https://help.nextcloud.com/u/zgq19941223)\ **Post date:** [October 14, 2018, 9:23am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/5 "2018-10-14T09:23:49Z")
![1111](https://help.nextcloud.com/uploads/default/original/2X/2/22a154e33c04d6cbaef97ffdf7be94f76b929179.png) ---
**Author:** ![wind](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wind/32/11494_2.png) [@wind](https://help.nextcloud.com/u/wind)\ **Post date:** [October 24, 2018, 7:45am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/6 "2018-10-24T07:45:17Z")
I have met the same question as you.too, How to solve it? If you find a way, please let me know, thank you ---
**Author:** ![wind](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wind/32/11494_2.png) [@wind](https://help.nextcloud.com/u/wind)\ **Post date:** [October 24, 2018, 7:46am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/7 "2018-10-24T07:46:03Z")
hello，I have met the same question as you.too, How to solve it? If you find a way, please let me know, thank you ---
**Author:** ![zgq19941223](https://help.nextcloud.com/user_avatar/help.nextcloud.com/zgq19941223/32/11348_2.png) [@zgq19941223](https://help.nextcloud.com/u/zgq19941223)\ **Post date:** [October 25, 2018, 9:24am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/8 "2018-10-25T09:24:30Z")
I have solved it. you only need to use the safe link ‘https’ will be ok. such as ‘‘[https://xxx.xx](https://xxx.xx)’’ ---
**Author:** ![zgq19941223](https://help.nextcloud.com/user_avatar/help.nextcloud.com/zgq19941223/32/11348_2.png) [@zgq19941223](https://help.nextcloud.com/u/zgq19941223)\ **Post date:** [October 25, 2018, 9:26am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/9 "2018-10-25T09:26:04Z")
你是不是中国人啊，老实交代。直接联系我邮箱1286658863@qq.com,给你解决问题 ---
**Author:** ![JimmyKater](https://help.nextcloud.com/user_avatar/help.nextcloud.com/jimmykater/32/4850_2.png) [@JimmyKater](https://help.nextcloud.com/u/JimmyKater)\ **Post date:** [October 25, 2018, 9:37am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/10 "2018-10-25T09:37:17Z")
would you mind translating it to english, please? ---
**Author:** ![zgq19941223](https://help.nextcloud.com/user_avatar/help.nextcloud.com/zgq19941223/32/11348_2.png) [@zgq19941223](https://help.nextcloud.com/u/zgq19941223)\ **Post date:** [October 25, 2018, 10:17am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/11 "2018-10-25T10:17:05Z")
Have you met the same question like me ? just type in the link started with “https”. my document server address is “[https://www.cdut.shop](https://www.cdut.shop)”, you can use my link to have a test . ---
**Author:** ![JimmyKater](https://help.nextcloud.com/user_avatar/help.nextcloud.com/jimmykater/32/4850_2.png) [@JimmyKater](https://help.nextcloud.com/u/JimmyKater)\ **Post date:** [October 25, 2018, 10:20am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/12 "2018-10-25T10:20:04Z")
thanks so much ---
**Author:** ![jkuester](https://help.nextcloud.com/user_avatar/help.nextcloud.com/jkuester/32/9086_2.png) [@jkuester](https://help.nextcloud.com/u/jkuester)\ **Post date:** [May 25, 2019, 5:59pm UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/13 "2019-05-25T17:59:24Z")
My situation is slightly different from the op and the above suggestions did not really work for me. Wanted to post out there and hopefully save anyone in a similar situation from a lot of headaches. **My Setup:** On a single Docker host (Ubuntu linux) I am running Nextcloud and OnlyOffice from docker containers. (Importantly, I am running the FPM version of the Nextcloud image.) I am using Caddy (also running in a Docker container) to proxy/serve both NC and OO on separate subdomains (e.g. [nc.example.com](http://nc.example.com) and [oo.example.com](http://oo.example.com)). **The Problem:** The seemingly easy task of pointing the OnlyOffice plugin in Nextcloud to my hosted OO server was thwarted by my UFW firewall blocking requests to my host machine when they originated _from_ my host machine. (Meaning that if I hosted OO on a separate machine everything worked fine, but when OO and NC were on the same host, and NC tried to make a request to OO, the firewall would block it because the IPs for the source and dest were the same). The error that showed up in NC was: > ‘HealthcheckRequest on check error: cURL error 28: Connection timed out after 60001 milliseconds’ I could not use the loopback interface on the host machine either since the Docker network stack is segregated from the host’s network stack (and I did not want to run my Docker network in “host” mode). The OO plugin in NC offers the ability to set internal addresses for your services and I thought perhaps I could point the containers at each other directly using the container names (since they both were on the same user-defined Docker network). This allowed me to connect NC to OO by setting http://oo\_contatiner\_name/ as the internal document editing service address. However, the setup still failed and I could see in the logs that when OO service tried to call back to [nc.example.com](http://nc.example.com) it timed out (blocked again by the firewall). So, of course, I tried to set the internal document server address for calling back to NC to http://nc\_containter\_name/. This did not work, though, at least in part because the FPM image needs to sit behind a webserver… **The Solution** I got things to work via a creative use of Docker network aliases. Basically, my Caddy container, OO container, and NC container were all on the same user-defined Docker network (nextcloud\_external-net). Docker lets you define network-level aliases for a container that can be resolved by services in other containers on the network. I used docker-compose to define my Caddy container setup and here is the relevant section with the aliases: ``` services: app: image: abiosoft/caddy:0.11.0 networks: nextcloud_external-net: aliases: - nc.example.com - oo.example.com ``` Then I was able to just enter [https://oo.example.com](https://oo.example.com) as the Document Editing Server Address in the OO plugin settings in Nextcloud (without filling anything out in the Advanced Server Settings) and everything worked! Whenever either of the containers tries to talk to the other (via [nc.example.com](http://nc.example.com) or [oo.example.com](http://oo.example.com)) those addresses resolve to the Caddy container and Caddy just proxys the request to the proper container. So, the requests between the two never actually leave the nextcloud\_external-net network. ---
**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\ **Post date:** [December 4, 2024, 7:38am UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/14 "2024-12-04T07:38:25Z")
---
**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\ **Post date:** [December 9, 2024, 3:14pm UTC](https://help.nextcloud.com/t/can-t-connect-onlyoffice-from-nextcloud-in-docker/36135/15 "2024-12-09T15:14:00Z")