Collabora and Nextcloud on the same server

tlamik · December 18, 2020, 10:13am

I tried to install Collabora server and the Nextcloud server, each of it has its own server, FQDN, etc.
It works. Now I am wondering and trying to make it work on one server, one FQDN, etc. It works partly. From LAN its OK, from Internet its not working. I have enabled ports 443 and 9980. Any ideas ? Is it possible to run these two SW on the same server ?

Reiner_Nippes · December 18, 2020, 12:27pm

yes.

this playbook may give you a reference installation (on a test server) to check the config. only working for nginx. apache is still work in progress.

tlamik · January 7, 2021, 11:03am

Thanks, but I was unsuccesful to get it worked. I crashed on certboot. Some kind of error on CentOS.
Anyway, I succesfully runs nextcloud and Collabora server on the same FQDN, but I had to enable port 9980 on firewall. I am not sure how much is it danger and unsecure. I tried to setup a apache reverse proxy, but no luck with that.

Reiner_Nippes · January 7, 2021, 11:49am

yes. centos is an error.

forgot to mention, that the “reloaded” version of the playbook is not centos ready yet.

https or http? public internet or private intranet?

tlamik · January 7, 2021, 12:03pm

I used the same cert for both of them from Let’s Encrypt, so yes, https and public internet.
Normally, for Nextcloud I opened only port 443, but here I have to open 9980 too.

Reiner_Nippes · January 7, 2021, 12:23pm

i can’t confirm this. i only needed to open a separate port for only office.

Maybe you have dive a little bit deeper into ip tables and there is only a rule missing that blocks internal traffik to the container. or it’s selinux related.

are you using the containered version?

tlamik · January 7, 2021, 12:29pm

I imagine when apache reverse proxy will works, I can close port 9980. When I split SW to two separate servers with two different FQDN, then it works without port 9980. I guess it is because in nextcloud I have patch to collabora https://FQDN:9980, without a port specify it not working, perhaps because on https is running nextcloud.

No, i am on physical server.

Reiner_Nippes · January 7, 2021, 12:34pm

why fqdn? why not localhost:9980? see below:

github.com

ReinerNippes/nextcloud/blob/32a0970b4804e1c3d42ce553f0ef570c2743ca3b/roles/prep_nginx/templates/nextcloud.conf.j2#L40


		return 301 $scheme://$host:{{ nc_ssl_port }}/remote.php/dav;
	}
	location = /.well-known/caldav {
		return 301 $scheme://$host:{{ nc_ssl_port }}/remote.php/dav;
	}
	location = /.well-known/webfinger {
		return 301 $scheme://$host:{{ nc_ssl_port }}/public.php?service=webfinger;
	}
{% if install_collabora %}
	location ^~ /loleaflet {
		proxy_pass https://localhost:9980;
		proxy_set_header Host $http_host;
	}
	
	location ^~ /hosting/discovery {
		proxy_pass https://localhost:9980;
		proxy_set_header Host $http_host;
	}
	 
	location ^~ /lool {

the docker version is using the container name as fqdn:

github.com

ReinerNippes/nextcloud_on_docker/blob/4bc38be0206dffe173a040f4c514c570f59f2522/roles/docker_container/templates/nginx.conf.j2#L86


        root /var/www/html;
        location = /robots.txt {
            allow all;
            log_not_found off;
            access_log off;
        }
{% if (online_office == 'collabora') and (ansible_architecture == 'x86_64') %}
        location ^~ /loleaflet {
            proxy_pass https://collabora_online:9980;
             proxy_set_header Host $http_host;
        }
        
        location ^~ /hosting/discovery {
            proxy_pass https://collabora_online:9980;
            proxy_set_header Host $http_host;
        }
         
        location ^~ /lool {
            proxy_pass https://collabora_online:9980;

btw: you could configure iptables to only allow ip 127.0.0.1 on port 9980. that is to check if the client is talking to this port.

tlamik · January 7, 2021, 1:13pm

No, I mean URL in nextcloud settings, in proxy I have correct localhost:9980

Reiner_Nippes · January 7, 2021, 2:58pm

Yes. But in my setup it’s https://{{ nexcloud_fqdn}}:443/ because nginx acts like a reverse proxy here. So I don’t need to open 9980.

github.com

ReinerNippes/nextcloud/blob/nextcloud-reloaded/roles/nextcloud/tasks/configure/collabora.yml#L27


  shell: php occ app:enable richdocuments
  args:
    chdir: "{{ nextcloud_www_dir }}"
- name: set collabora wopi url
  become_user: "{{ web_user[nextcloud_webserver_type][ansible_os_family] }}"
  become_flags: "{{ ansible_become_flags | default(omit) }}"
  become: yes
  shell: php occ config:app:set richdocuments {{ item }}
  loop:
    - "wopi_url --value https://{{ nextcloud_fqdn }}:{{ nextcloud_ssl_port }}"
    - "disable_certificate_verification --value=yes"
  args:
    chdir: "{{ nextcloud_www_dir }}"

tlamik · January 7, 2021, 3:40pm

I tried your suggestion, but no luck. Nexcloud says can’t connect to a server without 9980 or with 443. Perhaps my apache reverse proxy doing something wrong. Although https://FQDN/hosting/discovery works like a charm.

starlays · March 7, 2021, 10:53pm

Hello, any luck with this issue? I have the same problem :(.

sunjerry019 · April 14, 2021, 4:23am

Please check if the reverse proxy is set up properly according to Proxy settings — SDK https://gitlab.com/pages/sphinx documentation

I realized that my setup was missing a line on …/hosting/capabilities and after I fixed that it worked like a charm.

dolphinscorp · June 6, 2023, 2:34pm

I have same setup, two different virtual host, one for Nextcloud (https://mycloud.com) another is for collabora (https://myoffice.com for example)

on same server it is not working. I setup on different servers it works like a charm. All the things are same but is the issue on same server

Error logS:
23-06-02 09:46:55.048495 +0000 [ websrv_poll ] ERR #19: #19 bad request: [GET /cool/https%3A%2F%2Fmydomain.com2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F2020150_ocpquezrqp9o%3Faccess_token%3DGknoJ7aYLljUb49OOpv0VMbMUH1TRQjl%26access_token_ttl%3D1685735202000%26permission%3Dedit/ws?WOPISrc=https%3A%2F%2Fmydomain.com%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F2020150_ocpquezrqp9o&compat=/ws HTTP/1.1#015…]: Invalid or unknown request.| wsd/COOLWSD.cpp:3953

Someone suggested me to put collobora reverse proxy under same virtualhost of nextcloud. but error still there. On different servers having no issues.

If someone resolved this issue please post solution. I am using apache