Collabora - access forbidden again and again

Hi guys.
After many research i’m still blocked, I know they are so many topic about this problem, but I don’t find the solution… Everytime I want to open a files with Collabora, I got “access forbiden”…

I followed this doc to install my nextcloud and collabora :
Nextcloud : https://www.unixmen.com/install-and-configure-nextcloud-on-ubuntu-16-04-with-apache/
Collabora : https://nextcloud.com/collaboraonline/

Here my configuration.
OS version : Ubuntu 16.04
Nextcloud version : 11.0.1
Domain : exploit.enterprise.com
Host : nextcloud.exploit.enterprise.com

/etc/apache2/sites-enabled/nextcloud.conf

<VirtualHost *:80>
       ServerName nextcloud.exploit.enterprise.com
       Redirect / https://nextcloud.exploit.enterprise.com/
</VirtualHost>

<VirtualHost *:443>
       ServerName nextcloud.exploit.enterprise.com
       DocumentRoot /var/www/nextcloud

       ErrorLog ${APACHE_LOG_DIR}/error.log
       CustomLog ${APACHE_LOG_DIR}/access.log combined

       SSLEngine on
       SSLCertificateFile /etc/apache2/certif/nextcloud.crt
       SSLCertificateKeyFile /etc/apache2/certif/nextcloud.key
</VirtualHost>

/etc/apache2/sites-enabled/office.conf

<VirtualHost *:443>
  ServerName office.exploit.enterprise.com:443

  SSLEngine on
  SSLCertificateFile /etc/apache2/certif/office.crt
  SSLCertificateKeyFile /etc/apache2/certif/office.key

  # Encoded slashes need to be allowed
  AllowEncodedSlashes NoDecode

  # Container uses a unique non-signed certificate
  SSLProxyEngine On
  SSLProxyVerify None
  SSLProxyCheckPeerCN Off
  SSLProxyCheckPeerName Off

  # keep the host
  ProxyPreserveHost On

  # static html, js, images, etc. served from loolwsd
  # loleaflet is the client part of LibreOffice Online
  ProxyPass           /loleaflet https://127.0.0.1:9980/loleaflet retry=0
  ProxyPassReverse    /loleaflet https://127.0.0.1:9980/loleaflet

  # WOPI discovery URL
  ProxyPass           /hosting/discovery https://127.0.0.1:9980/hosting/discovery retry=0
  ProxyPassReverse    /hosting/discovery https://127.0.0.1:9980/hosting/discovery

  # Main websocket
  ProxyPassMatch "/lool/(.*)/ws$" wss://127.0.0.1:9980/lool/$1/ws nocanon

  # Admin Console websocket
  ProxyPass   /lool/adminws wss://127.0.0.1:9980/lool/adminws

  # Download as, Fullscreen presentation and Image upload operations
  ProxyPass           /lool https://127.0.0.1:9980/lool
  ProxyPassReverse    /lool https://127.0.0.1:9980/lool
</VirtualHost>

Collabora run :

docker run -t -d -p 127.0.0.1:9980:9980 -e 'domain=nextcloud\\.exploit\\.enterprise\\.com' --restart always --cap-add MKNOD collabora/code

I got nothing in log files. Nextcloud and Collabora are host on the same machine.

In Collabora i’ve try localhost, 127.0.01, office.exploit.enterprise.com with every port possible :slight_smile:
I really need this application in my enterprise… I’m desesperate :slight_smile:

I guess it’s a stupid problem, but i really don’t know how i can solve this…

Thank a lot ! And have a good week-end.

Hi again.

Nobody have an idea ? I’m still blocked and i don’t know what to do…

Thank !

https://help.nextcloud.com/t/well-this-is-embarrassing/6261/38?u=stuart_naylor&source_topic_id=8738

Hi, thank a lot to your answer.

But… i just try and nothing change…

Hello :slight_smile:
Same problem for me… I have collabora running via docker, and nextcloud in apache, both on the same server. Nextcloud has a virtulhost on port 443, apache reverse proxy has a virtualhost on port 9999. I followed the official collabora tutorial, put ‘https://mydomain.com:9999’ in the admin pannel in nextcloud, but always the same error :frowning:

I have two self-signed certificate, one for nextcloud and one for the reverse proxy. I think this is the cause of the error but I don’t know how to resolve it…

Nothing else ?