Collabora Subdomain

[C0nvert]

Hey guys i have my problems with setting up collabora
i get the nextcloud vm and installed it in Hyper -V on a windows 2012 r2 server.
The server is working as a Domain Controller and have the domain dc-azer.local

I intsalled the nextcloud in the vm and now i have a problem.

1. how to i get and install free ssl and how do i config a subdomain ?
   i’m a total beginner so maybe you can help me

The windows server has the IP: 192.168.0.2
And is a domain controller: dc-azer.local
The Nextcloud vm IP: 192.168.0.49

I also have a dyndns host

[Ark74]

You should be able to use Let’s Encrypt (free SSL) with dyndns but that must be a FQDN you can’t issue valid SSL certs for local domains, as described on the standard, I guess 2014/2015 was the last time you could buy a valid SSL cert for a local domain name.

So you need to buy a domain, or get a dynamic one if you wanna use Collabora/CODE/LibOOnline

Edit: you need SSL for both Nextcloud and the office domain.

[C0nvert]

@Ark74
Thank you for your response.
I buyed a domain from 1and1
e.g azer-cloud.de
And a subdomain office.azer.cloud.de
And i also have a Dyndns account
e.g azer.dyndns-ip.com

So i can reach my nextcloud Server through the dyndns Server
azer.dyndns-ip.com/nextcloud

So what i need to do to get SSL and collabora to work.
In Detail how i need to edit my domain to work with collabora cause my webspace is on the Windows 2012 Server not on a cloud space

Thank you for the reply and the help and sry that i’m asking so much^^

[Ark74]

In my experience is better to use a subdomain for technical and esthetic reasons.
Nextcloud will suggest you to use some https configurations that some times are way to much secure when you talk about a normal website, and using SSL sometimes can bring some headaches.

So it’s better to have a nc.domain.ltd or cloud.domain.ltd so those settings will only apply to Nextcloud.

Getting code to work is relatively easy, relatively.

When you say you are using hyper-v what kind of VM are you using for Nextcloud?
Ubuntu, Debian?
Are you using Apache, nginx?

About asking, if you want to know you need to ask

[C0nvert]

it’s more a project for me, it’s make fun and is also lerning by doing

I tried different thinks with hyper-v
First i started to with debian than centos and so on.
But finally i also wanted to try the prebuild vm so in the moment i have running a the prebuild nextcloud vm based on unbuntu without GUI.
The preconfigured vm uses Apache.
Webmin is also installed, ssh is possible also through ddns.

I need to use dyndns as my ISP don’t give me a static ip.
I looked at the 1and1 control center and wanted to redirect maybe the domain to the dyndns adress.
But i don’t have a clue cause i can’t edit the A Record, it wants from me an IPv4 adress , the problem as mentioned before my ipv4 is not static so unless i buy direktly a domain from dyndns i don’t know how to point with the 1and1 subdomain e.g nc.azer-cloud.de on my internal ip without dyndns.
If i use dyndns only it’s very simple.
The Router is the DNS Server and redirekt the open port to the right computer. but with the 1and1 domain i don’t have a clue.

About the SSL. SSL would be nice cause if the cloud server is reachable from the internet, there is always a possibility that some can do a man in the middle attack.

1and1 offer also one ssl certificat i can decide if i want to use it with the domain or with the subdomain (i only can choose one of them)

Edit:
I done a cname forwarding from the 1and1 subdomain to my dyndns.
so now i only need to config collobora

[Ark74]

it’s more a project for me, it’s make fun and is also lerning by doing

Good!
It’s always funnier to do it without pressure.

I tried different thinks with hyper-v
First i started to with debian than centos and so on.
But finally i also wanted to try the prebuild vm so in the moment i
have running a the prebuild nextcloud vm based on unbuntu without GUI.
The preconfigured vm uses Apache.
Webmin is also installed, ssh is possible also through ddns.

It goes on styles and believes but a good starting point would be *buntu based server with apache, since there you’ll find native support for docker.

I need to use dyndns as my ISP don’t give me a static ip.
I looked at the 1and1 control center and wanted to redirect maybe the
domain to the dyndns adress.

I also use some dynamic IP connection for some sites. There is no problem with that.

But i don’t have a clue cause i can’t edit the A Record, it wants from
me an IPv4 adress , the problem as mentioned before my ipv4 is not
static so unless i buy direktly a domain from dyndns i don’t know how
to point with the 1and1 subdomain e.g nc.azer-cloud.de on my internal
ip without dyndns.

Your domain registrant could let you manage your own DNS server for you domain, that is another cool and nice thing to do, but a whole different discussion.

You only need an A record pointing to your public IP so you can get a SSL cert (for free) with Let’s Encrypt, then configure Apache proxy for collabora/code, etc

If i use dyndns only it’s very simple.
The Router is the DNS Server and redirekt the open port to the right
computer. but with the 1and1 domain i don’t have a clue.

About the SSL. SSL would be nice cause if the cloud server is reachable
from the internet, there is always a possibility that some can do a man
in the middle attack.

It is always possible, but unlikely.

1and1 offer also one ssl certificat i can decide if i want to use it
with the domain or with the subdomain (i only can choose one of them)

I would recommend you try letsencrypt for flexibility, then if you want, you could buy the one will match your needs.

You also might wanna support letsencrypt on the way. +1

[C0nvert]

@Ark74

I would recommend you try letsencrypt for flexibility, then if you want, you could buy the one will match your needs.

You also might wanna support letsencrypt on the way. +1

okay will do this.
But i need your help cause i’m stuck now.
I get managed redirect the “nc.domainName.de” to my dyndns.
But whats next?
How can i get collabora working now?

[Ark74]

Docker is your next step.
Make sure to use the correct kernel there are two supported releases for docker.

• 4.4
• 4.8

That you have the linux-image-extra-virtual branch installed.
And support for aufs.

I’m not in front of my computer so can’t have detailed info, but you can find several threads were we discuss this issue, read and try, if you can’t find something very specific you can come back and I’ll try to help you out.

Here the full docs

Collabora Online Development Edition (CODE) - Collabora Productivity

Cheers

[C0nvert]

Okay next Problem
i get managed to to lets encrypt on this domain nc.c0nvert.de
My Domain: c0nvert.de
My Subdomains: nc.c0nvert.de ; office.c0nvert.de
Let’s Encrypt is working for nc.c0nvert.de

I run the collabora.sh
(https://raw.githubusercontent.com/nextcloud/vm/master/apps/collabora.sh)
There i need to fill out two things:

1. “Collabora subdomain eg: office.yourdomain.com"
   for me it would be: office.c0nvert.de
   2.Nextcloud Main Domain
   (The Script Text)
   Collabora” --inputbox "Nextcloud url, make sure it looks like this: cloud\.yourdomain\.com"
   for me it would be: nc\.c0nvert\.de

So a few questions
1.Need i do the same Letsencrypt Procedur for the secon subdomain office.c0nvert.de?
2. Need the office subdomain also point to my external ip?
3.what i need to setup on the nextcloud web page under administrator for collabora online need i to put my host or domain there?
for me “https//office.c0nvert.de” ?

[Ark74]

@C0nvert

Okay next Problem
i get managed to to lets encrypt on this domain nc.c0nvert.de
My Domain: c0nvert.de
My Subdomains: nc.c0nvert.de ; office.c0nvert.de
Let’s Encrypt is working for nc.c0nvert.de

Ok, all cool at this point.[quote=“C0nvert, post:9, topic:15074”]
So a few questions
1.Need i do the same Letsencrypt Procedur for the secon subdomain office.c0nvert.de?
[/quote]

If you ran collabora script, you shouldn’t do anything else.
The script was design to take care of everything.

2.Need the office subdomain also point to my external ip?

Yep. But don’t allow it to acces nextcluod from that domain. Meaning if you enter office.c0nvert.de you shouldn’t be able to access nextcloud.

3.what i need to setup on the nextcloud web page under administrator for collabora online need i to put my host or domain there?
for me “https//office.c0nvert.de” ?

If you run the script it should do all the steps, but it’s required that the installation was done also with the VM script, or at least that your installation match the variables that the script will call.

I would say that you already have domains, letsencrypt going and nextcloud.
That is 60% of the installation. Now the rest 39% is docker, install it and make sure you have aufs support (comes with the right kernel).

To know if you have aufs support already use:

grep aufs /proc/filesystems

If not this are AFAIK the only supported kernels for AUFS.

linux-image-extra-virtual for 4.4
linux-image-extra-virtual-hwe-16.04 for 4.8

Then copy paste the apache proxy config file, and run the docker with the correct parameters.

[C0nvert]

i got managed it to work.
Everything is working except the mobile client login there i got a connection timed out message, on the web browser and the desktop client everything works

Any suggestion?

[Ark74]

You mean the android app?

[C0nvert]

Exactly
If i log in in the Windows client (or the webpage ) everything is working
Also if i log in in chrome on Android it works, but if i use the Android APP from playstore (no mather if i use the nextcloud or owncloud APP) it fails due to connection timed out

EDIT:
No i cant even log in or reach my nextcloud page
Connection Timed out.
Yesterday the web page was working
What happens?
i can ping my domain but cant connect

[Ark74]

Sorry no idea why.
There could be at least 100 different main issues.
If this is done, close this up and open a new one for the next issue.

Cheers!