The Basics
- Nextcloud Server version (32.0):
32.0 on AIO
- Operating system and version (:
Debian 12 raspberry Pi
- Web server and version (e.g, Apache 2.4.25):
replace me
- Reverse proxy and version
Apache 2.4.65
- PHP version:
8.4.13
Summary of the issue you are facing:
Can’t open documents files like .docx
In Nextcloud > Admin>Nextcloud Office it’s green with :
Le serveur Collabora Online est accessible.
Collabora Online Development Edition 25.04.6.1 c042625181
URL used by browser : https://cloud.home.arpa
URL Nextcloud used by Collabora : http://nextcloud-aio-apache:23973
I am able to access https://cloud.home.arpa/hosting/discovery and https://cloud.home.arpa/hosting/capabilities in my browser
Steps to replicate it (hint: details matter!):
-
Install Nextcloud AIO via compose file
-
Configure reverse proxy and options
-
can’t open files
My apache config file :
Résumé
<VirtualHost *:80>
ServerName cloud.home.arpa
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
RewriteCond %{SERVER_NAME} =cloud.home.arpa
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
<VirtualHost *:443>
ServerName cloud.home.arpa
# Reverse proxy based on https://httpd.apache.org/docs/current/mod/mod_proxy_wstunnel.html
RewriteEngine On
ProxyPreserveHost On
RequestHeader set X-Real-IP %{REMOTE_ADDR}s
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Host "cloud.home.arpa"
AllowEncodedSlashes NoDecode
# Adjust the two lines below to match APACHE_PORT and APACHE_IP_BINDING
ProxyPass / http://localhost:11000/
ProxyPassReverse / http://localhost:11000/
RewriteCond %{HTTP:Upgrade} websocket [NC]
RewriteCond %{HTTP:Connection} upgrade [NC]
RewriteCond %{THE_REQUEST} "^[a-zA-Z]+ /(.*) HTTP/\d+(\.\d+)?$"
RewriteRule .? "ws://localhost:11000/%1" [P,L,UnsafeAllow3F]
# Adjust to match APACHE_PORT and APACHE_IP_BINDING
# Enable h2, h2c and http1.1
Protocols h2 h3 h2c http/1.1
# Solves slow upload speeds caused by http2
H2WindowSize 5242880
# TLS
# already included in /etc/apache2/conf-available/ssl-common.conf
#SSLEngine on
#SSLProtocol -all +TLSv1.2 +TLSv1.3
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE->
SSLHonorCipherOrder off
SSLSessionTickets off
# LOGS
ErrorLog ${APACHE_LOG_DIR}/nextcloud-aio-error.log
CustomLog ${APACHE_LOG_DIR}/nextcloud-aio-access.log combined
# If running apache on a subdomain (eg. nextcloud.example.com) of a domain that already has an wildcard ssl certificate from certbot on this machine,
# the <your-nc-domain> in the below lines should be replaced with just the domain (eg. example.com), not the subdomain.
# In this case the subdomain should already be secured without additional actions
#SSLCertificateFile /etc/letsencrypt/live/<your-nc-domain>/fullchain.pem
#SSLCertificateKeyFile /etc/letsencrypt/live/<your-nc-domain>/privkey.pem
# Disable HTTP TRACE method.
TraceEnable off
<Files ".ht*">
Require all denied
</Files>
# Support big file uploads
LimitRequestBody 0
Timeout 86400
ProxyTimeout 86400
SSLProxyEngine On
SSLProxyVerify None
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off
# Proxy Collabora Online paths
ProxyPass /cool https://127.0.0.1:9980/cool nocanon
ProxyPassReverse /cool https://127.0.0.1:9980/cool
ProxyPass /lool https://127.0.0.1:9980/cool nocanon
ProxyPassReverse /lool https://127.0.0.1:9980/cool
ProxyPass /hosting/discovery https://127.0.0.1:9980/hosting/discovery nocanon
ProxyPassReverse /hosting/discovery https://127.0.0.1:9980/hosting/discovery
ProxyPass /browser https://127.0.0.1:9980/browser nocanon
ProxyPassReverse /browser https://127.0.0.1:9980/browser
# WebSocket proxying for Collabora
ProxyPassMatch "/cool/(.*)/ws$" "wss://127.0.0.1:9980/cool/$1/ws" nocanon
ProxyPass /cool/adminws wss://127.0.0.1:9980/cool/adminws nocanon
</VirtualHost>
Log entries
In collabora container logs : Failed to install config [shared-http_nextcloud-aio-apache:23973/index.php/apps/richdocuments/wopi/settings-68f51c06705f668f4e56c2da8d]| wsd/RequestVettingStation.cpp:195
Nextcloud
Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.
logs are not up to date with the error i'm facing
Web Browser
If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.
File info for /Documents/Welcome to Nextcloud Hub.docx fetched
Object { filename: "/Documents/Welcome to Nextcloud Hub.docx", basename: "Welcome to Nextcloud Hub.docx", lastmod: "Sun, 19 Oct 2025 12:04:38 GMT", size: 23876, type: "file", etag: "83e71cecebbf8db99061c69ea64c5249", mime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", tags: "", getcontentlength: 23876, getcontenttype: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", … }
and I get a 101 GET wss :
wss://cloud.home.arpa/cool/http%3A%2F%2Fnextcloud-aio-apache%3A23973%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F43_ocqd8607jbpe%3Faccess_token%3DtekrvSGNEejxrLfCIpJSs4SguuOrJla9%26access_token_ttl%3D0%26no_auth_header%3D/ws?WOPISrc=http%3A%2F%2Fnextcloud-aio-apache%3A23973%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F43_ocqd8607jbpe&compat=/ws
Web server / Reverse Proxy
The output of your Apache/nginx/system log in /var/log/apache2/nextcloud-aio-access.log:
192.168.1.19 - - [19/Oct/2025:21:12:40 +0200] "GET /cool/http%3A%2F%2Fnextcloud-aio-apache%3A23973%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F43_ocqd8607jbpe%3Faccess_token%3DA3Rstj7phqnNCxgRdbAb82q6HkiW5k2C%26access_token_ttl%3D0%26no_auth_header%3D/ws?WOPISrc=http%3A%2F%2Fnextcloud-aio-apache%3A23973%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F43_ocqd8607jbpe&compat=/ws HTTP/1.1" 101 670 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:144.0) Gecko/20100101 Firefox/144.0"
Configuration
Nextcloud
The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):
Résumé
{
“system”: {
“one-click-instance”: true,
“one-click-instance.user-limit”: 100,
“memcache.local”: “\\OC\\Memcache\\APCu”,
“apps_paths”: [
{
“path”: “\/var\/www\/html\/apps”,
“url”: “\/apps”,
“writable”: false
},
{
“path”: “\/var\/www\/html\/custom_apps”,
“url”: “\/custom_apps”,
“writable”: true
}
],
“check_data_directory_permissions”: false,
“memcache.distributed”: “\\OC\\Memcache\\Redis”,
“memcache.locking”: “\\OC\\Memcache\\Redis”,
“redis”: {
“host”: “***REMOVED SENSITIVE VALUE***”,
“password”: “***REMOVED SENSITIVE VALUE***”,
“port”: 6379
},
“overwritehost”: “cloud.home.arpa”,
“overwriteprotocol”: “https”,
“passwordsalt”: “***REMOVED SENSITIVE VALUE***”,
“secret”: “***REMOVED SENSITIVE VALUE***”,
“trusted_domains”: [
“localhost”,
“cloud.home.arpa”
],
“datadirectory”: “***REMOVED SENSITIVE VALUE***”,
“dbtype”: “pgsql”,
“version”: “32.0.0.13”,
“overwrite.cli.url”: “https:\/\/cloud.home.arpa\/”,
“dbname”: “***REMOVED SENSITIVE VALUE***”,
“dbhost”: “***REMOVED SENSITIVE VALUE***”,
“dbport”: “”,
“dbtableprefix”: “oc_”,
“dbuser”: “***REMOVED SENSITIVE VALUE***”,
“dbpassword”: “***REMOVED SENSITIVE VALUE***”,
“installed”: true,
“instanceid”: “***REMOVED SENSITIVE VALUE***”,
“maintenance”: false,
“updatechecker”: true,
“updatedirectory”: “\/nc-updater”,
“loglevel”: 2,
“app_install_overwrite”: [
“nextcloud-aio”
],
“log_type”: “file”,
“logfile”: “\/var\/www\/html\/data\/nextcloud.log”,
“log_rotate_size”: 10485760,
“log.condition”: {
“apps”: [
“admin_audit”
]
},
“preview_max_x”: 2048,
“preview_max_y”: 2048,
“jpeg_quality”: 60,
“enabledPreviewProviders”: {
“1”: “OC\\Preview\\Image”,
“2”: “OC\\Preview\\MarkDown”,
“3”: “OC\\Preview\\MP3”,
“4”: “OC\\Preview\\TXT”,
“5”: “OC\\Preview\\OpenDocument”,
“6”: “OC\\Preview\\Movie”,
“7”: “OC\\Preview\\Krita”,
“0”: “OC\\Preview\\Imaginary”,
“23”: “OC\\Preview\\ImaginaryPDF”
},
“enable_previews”: true,
“upgrade.disable-web”: true,
“mail_smtpmode”: “smtp”,
“trashbin_retention_obligation”: “auto, 30”,
“versions_retention_obligation”: “auto, 30”,
“activity_expire_days”: 30,
“simpleSignUpLink.shown”: false,
“share_folder”: “\/Shared”,
“one-click-instance.link”: “https:\/\/nextcloud.com\/all-in-one\/”,
“upgrade.cli-upgrade-link”: “https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/2726”,
“maintenance_window_start”: 100,
“allow_local_remote_servers”: true,
“davstorage.request_timeout”: 3600,
“documentation_url.server_logs”: “https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/5425”,
“htaccess.RewriteBase”: “\/”,
“dbpersistent”: false,
“auth.bruteforce.protection.enabled”: true,
“ratelimit.protection.enabled”: true,
“files_external_allow_create_new_local”: false,
“trusted_proxies”: “***REMOVED SENSITIVE VALUE***”,
“preview_imaginary_url”: “***REMOVED SENSITIVE VALUE***”,
“preview_imaginary_key”: “***REMOVED SENSITIVE VALUE***”,
“default_phone_region”: “fr”,
“DOMAIN”: “cloud.home.arpa”
}
}
Apps
The output of occ app:list (if possible).
Résumé
Enabled:
- activity: 5.0.0-dev.0
- admin_audit: 1.22.0
- bruteforcesettings: 5.0.0-dev.0
- calendar: 6.0.2
- circles: 32.0.0
- cloud_federation_api: 1.16.0
- comments: 1.22.0
- contacts: 8.0.4
- contactsinteraction: 1.13.1
- dashboard: 7.12.0
- dav: 1.34.2
- deck: 1.16.0
- federatedfilesharing: 1.22.0
- federation: 1.22.0
- files: 2.4.0
- files_downloadlimit: 5.0.0-dev.0
- files_pdfviewer: 5.0.0-dev.0
- files_reminders: 1.5.0
- files_sharing: 1.24.0
- files_trashbin: 1.22.0
- files_versions: 1.25.0
- firstrunwizard: 5.0.0-dev.0
- logreader: 5.0.0-dev.0
- lookup_server_connector: 1.20.0
- nextcloud-aio: 0.8.0
- nextcloud_announcements: 4.0.0-dev.0
- notes: 4.12.3
- notifications: 5.0.0-dev.0
- notify_push: 1.2.0
- oauth2: 1.20.0
- password_policy: 4.0.0-dev.0
- photos: 5.0.0-dev.1
- privacy: 4.0.0-dev.0
- profile: 1.1.0
- provisioning_api: 1.22.0
- recommendations: 5.0.0-dev.0
- related_resources: 3.0.0-dev.0
- richdocuments: 9.0.1
- serverinfo: 4.0.0-dev.0
- settings: 1.15.1
- sharebymail: 1.22.0
- support: 4.0.0-dev.0
- survey_client: 4.0.0-dev.0
- systemtags: 1.22.0
- text: 6.0.0-dev.0
- theming: 2.7.0
- twofactor_backupcodes: 1.21.0
- twofactor_totp: 14.0.0
- updatenotification: 1.22.0
- user_status: 1.12.0
- viewer: 5.0.0-dev.0
- weather_status: 1.12.0
- webhook_listeners: 1.3.0
- whiteboard: 1.3.0
- workflowengine: 2.14.0
Disabled: - app_api: 32.0.0 (installed 32.0.0)
- encryption: 2.20.0
- files_external: 1.24.0
- suspicious_login: 10.0.0-dev.0
- tasks: 0.16.1
- twofactor_nextcloud_notification: 6.0.0-dev.0
- user_ldap: 1.23.0
Tell me what details i can add to help the helpers !
Thanks in advance 