Collabora Online + proxy apache2

ℹ️ Support
1

Hi! I have a proxy server for nextcloud, anna nextcloud, I installed colabora online through the application panel and unfortunately it does not work. I added what is discussed here to the proxy server and unfortunately it does not work https://collabora-online-for-nextcloud.readthedocs.io/…

I have the message Saved with Error: Collabora Online should use the same protocol as the server installation

Does anyone know how to fix it?

2

the error sounds like you exposed one system with TLS (https://) and the other with plain http:// you should setup both system with TLS (https://) and valid public DNS name.

4

If I set https on the target server, I have redirect loops and a 500 error.

5

If you need more detailed help, we need more details about your installation, otherwise this is going to be a guessing game.

6 
<?php
$CONFIG = array (
  'instanceid' => '',
  'passwordsalt' => 'uR',
  'secret' => '9/',
  'trusted_domains' => 
  array (
    0 => '10.60.1.8',
    1 => '10.60.1.6',
  ),
  'datadirectory' => '/var/www/next/data',
  'dbtype' => 'mysql',
  'version' => '24.0.4.1',
  'overwrite.cli.url' => '  ',
  'dbname' => 'nextcloud_szkola',
  'dbhost' => '10.60.1.4',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => '',
  'installed' => true,
  'default_language' => 'pl',
  'force_language' => 'pl',
  'default_locale' => 'pl_PL',
  'force_locale' => 'pl_PL',
  'maintenance' => false,
  'theme' => '',
  'loglevel' => 1,
  'debug' => true,
  'trusted_proxies' => 
  array (
    0 => '10.60.1.8',
  ),
  'overwriteprotocol' => 'https',
  'htaccess.RewriteBase' => '/',
  'default_phone_region' => 'PL',
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'app_install_overwrite' => 
  array (
    0 => 'uploaddetails',
    1 => 'core',
    2 => 'talk_simple_poll',
    3 => 'spreedme',
    4 => 'file_upload_notification',
    5 => 'admin_notifications',
    6 => 'files_texteditor',
    7 => 'talk_matterbridge',
    8 => 'dashboardcharts',
  ),
  'updater.release.channel' => 'stable',
  'twofactor_enforced' => 'false',
  'twofactor_enforced_groups' => 
  array (
    0 => 'admin',
  ),
);

proxy server

<VirtualHost 10.60.1.8:443>
	ProxyPreserveHost On
        SSLEngine On
	SSLCertificateFile /etc/
	SSLCertificateKeyFile /etc/
	SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
	SSLHonorCipherOrder on
	SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
        # Servers to proxy the connection, or;
        # List of application servers:
        # Usage:
        # ProxyPass / http://[IP Addr.]:[port]/
        # ProxyPassReverse / http://[IP Addr.]:[port]/
        # Example:
	ServerName http://example.com
	ProxyPass / http://10.60.1.6/
	ProxyPassReverse / http://10.60.1.6/
	ProxyErrorOverride On
#SSLProxyVerify None
#SSLProxyCheckPeerCN Off
#SSLProxyCheckPeerName Off
     <IfModule mod_headers.c>
      Header always set Strict-Transport-Security "max-age=15552000; "
    </IfModule>
    RewriteEngine On
    RewriteRule ^/\.well-known/carddav https://example.com/remote.php/dav/ [R=301,L]
    RewriteRule ^/\.well-known/caldav https://example.com/remote.php/dav/ [R=301,L]
    LimitRequestBody 0
 
</VirtualHost>

nexcloud server

<VirtualHost 10.60.1.6:80>
	ServerName exaple.com
 
    <IfModule mod_headers.c>
      Header always set Strict-Transport-Security "max-age=15552000; "
    </IfModule>
    
<Directory "/var/www/next">
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>

	DocumentRoot /var/www/next


	ErrorLog ${APACHE_LOG_DIR}/error.log
	CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>