[SOLVED] Upgrading Collabora code renders it inoperable

razor7 · February 8, 2022, 3:55pm

Hi! I’m able to run Collabora code 6.4.14.3 from Docker image but if I upgrade to 21.11.1.4.1 it fails with this error in NextCloud 23.0.1:
imagen

I share my configurations of Apache proxys and docker-compose of NextCloud and Collabora code. Thanks for the help!

docker-compose of Nextcloud

version: '2'

services:
  nextcloud:
    image: 'nextcloud:23.0.1-fpm'
    restart: always
    container_name: nextcloud-app
    volumes:
      - /media/data/nextcloud/data/html:/var/www/html
      - /media/data/nextcloud/data/config:/var/www/html/config
      - /media/data/nextcloud/data/cloud_data:/var/www/html/data
    depends_on:
      - nextcloud_redis
      
  nextcloud_notify_push:
    image: 'nextcloud:23.0.1-fpm'
    restart: always
    container_name: nextcloud-notify-push
    volumes:
      - /media/data/nextcloud/data/html:/var/www/html
      - /media/data/nextcloud/data/config:/var/www/html/config:ro
      - /media/data/nextcloud/data/cloud_data:/var/www/html/data
    environment:
      - PORT=7867
      - NEXTCLOUD_URL=https://cloud.server.com/
    ports:
      - 7867:7867
    entrypoint: /var/www/html/custom_apps/notify_push/bin/x86_64/notify_push /var/www/html/config/config.php
    depends_on:
      - nextcloud
      - nextcloud_redis

  nextcloud_nginx:
    image: 'nginx'
    restart: always
    container_name: nextcloud-nginx
    volumes:
      - /media/data/nextcloud/data/html:/var/www/html
      - /media/data/nextcloud/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
    ports:
      - 3080:80
    links:
      - nextcloud
    depends_on:
      - nextcloud

  nextcloud_redis:
    image: 'redis:alpine'
    restart: always
    container_name: nextcloud-redis
    volumes:
      - /media/data/nextcloud/redis-data:/data

Apache proxy of Nextcloud https://cloud.server.com/

<IfModule mod_rewrite.c>
  RewriteEngine on
  RewriteRule ^/\.well-known/host-meta /public.php?service=host-meta [QSA,L]
  RewriteRule ^/\.well-known/host-meta\.json /public.php?service=host-meta-json [QSA,L]
  RewriteRule ^/\.well-known/carddav /remote.php/dav/ [R=301,L]
  RewriteRule ^/\.well-known/caldav /remote.php/dav/ [R=301,L]
  RewriteRule ^/\.well-known/webfinger /index.php/.well-known/webfinger [R=301,L]
  RewriteRule ^/\.well-known/nodeinfo /index.php/.well-known/nodeinfo [R=301,L]
</IfModule>

<IfModule mod_headers.c>
  Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
  Header set X-Frame-Options "SAMEORIGIN"
</IfModule>

<Proxy />
  Order deny,allow
  Allow from all
</Proxy>

ProxyPreserveHost On
ProxyPass /.well-known/acme-challenge/ !
ProxyPass / http://lucas.server.com:3080/
ProxyPassReverse / http://lucas.server.com:3080/

ProxyPass /push/ws ws://lucas.server.com:7867/ws
ProxyPass /push/ http://lucas.server.com:7867/
ProxyPassReverse /push/ http://lucas.server.com:7867/

ProxyTimeout 21600

docker-compose of Collabora

version: '2'

services:
  collabora:
    image: 'collabora/code:21.11.1.4.1'
    restart: always
    container_name: collabora
    ports:
      - 9980:9980
    cap_add:
      - MKNOD
    environment:
      - domain=cloud.server.com
      - dictionaries='en es'
      - username=razor7
      - password=07Cf0264
      - VIRTUAL_HOST=collabora.server.com
      - VIRTUAL_PORT=9980
      - VIRTUAL_PROTO=https
      - extra_params=-o:welcome.enable=false

Apache proxy of Collabora https://collabora.server.com

# Encoded slashes need to be allowed
AllowEncodedSlashes NoDecode

<Proxy />
  Order deny,allow
  Allow from all
</Proxy>

# Container uses a unique non-signed certificate
SSLProxyEngine On
SSLProxyVerify None
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off
SSLProxyCheckPeerExpire Off

RequestHeader set Front-End-Https "On"

# keep the host
ProxyPreserveHost On

ProxyPass /.well-known/acme-challenge/ !

# static html, js, images, etc. served from loolwsd
# loleaflet is the client part of LibreOffice Online
ProxyPass           /loleaflet https://collabora.server.com:9980/loleaflet retry=0
ProxyPassReverse    /loleaflet https://collabora.server.com:9980/loleaflet

# WOPI discovery URL
ProxyPass           /hosting/discovery https://collabora.server.com:9980/hosting/discovery retry=0
ProxyPassReverse    /hosting/discovery https://collabora.server.com:9980/hosting/discovery

# Main websocket
ProxyPassMatch "/lool/(.*)/ws$" wss://collabora.server.com:9980/lool/$1/ws nocanon

# Admin Console websocket
ProxyPass   /lool/adminws wss://collabora.server.com:9980/lool/adminws

# Download as, Fullscreen presentation and Image upload operations
ProxyPass           /lool https://collabora.server.com:9980/lool
ProxyPassReverse    /lool https://collabora.server.com:9980/lool

# Endpoint with information about availability of various features
ProxyPass           /hosting/capabilities https://collabora.server.com:9980/hosting/capabilities retry=0
ProxyPassReverse    /hosting/capabilities https://collabora.server.com:9980/hosting/capabilities

razor7 · February 8, 2022, 4:29pm

Sorry, just stumbled upon this proxy documentation from Collabora and realized I had to upgrade my proxy settings https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html

AllowEncodedSlashes NoDecode
SSLProxyEngine On
ProxyPreserveHost On

# cert is issued for collaboraonline.example.com and we proxy to localhost
SSLProxyVerify None
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off

ProxyPass /.well-known/acme-challenge/ !

# static html, js, images, etc. served from coolwsd
# browser is the client part of Collabora Online
ProxyPass           /browser https://collabora.server.com:9980/browser retry=0
ProxyPassReverse    /browser https://collabora.server.com:9980/browser

# WOPI discovery URL
ProxyPass           /hosting/discovery https://collabora.server.com:9980/hosting/discovery retry=0
ProxyPassReverse    /hosting/discovery https://collabora.server.com:9980/hosting/discovery

# Capabilities
ProxyPass           /hosting/capabilities https://collabora.server.com:9980/hosting/capabilities retry=0
ProxyPassReverse    /hosting/capabilities https://collabora.server.com:9980/hosting/capabilities

# Main websocket
ProxyPassMatch      "/cool/(.*)/ws$"      wss://collabora.server.com:9980/cool/$1/ws nocanon

# Admin Console websocket
ProxyPass           /cool/adminws wss://collabora.server.com:9980/cool/adminws

# Download as, Fullscreen presentation and Image upload operations
ProxyPass           /cool https://collabora.server.com:9980/cool
ProxyPassReverse    /cool https://collabora.server.com:9980/cool

# Compatibility with integrations that use the /lool/convert-to endpoint
ProxyPass           /lool https://collabora.server.com:9980/cool
ProxyPassReverse    /lool https://collabora.server.com:9980/cool