minor modification. Office needs a valid https endpoint

This commit is contained in:
pazpi 2025-01-02 12:41:59 +01:00
parent 25d678b5d6
commit 98d503ea10

View file

@ -57,7 +57,7 @@ in
settings = { settings = {
overwriteProtocol = "https"; overwriteProtocol = "https";
default_phone_region = "IT"; defaultPhoneRegion = "IT";
trusted_proxies = [ "192.168.1.150" ]; trusted_proxies = [ "192.168.1.150" ];
trusted_domains = [ "cloud.${cfg.proxy.domain}" ]; trusted_domains = [ "cloud.${cfg.proxy.domain}" ];
maintenance_window_start = 1; maintenance_window_start = 1;
@ -82,10 +82,12 @@ in
}; };
}; };
phpOptions."opcache.interned_strings_buffer" = "64"; phpOptions = {
"opcache.interned_strings_buffer" = "64";
"opcache.memory_consumption" = "256";
};
config = { config = {
defaultPhoneRegion = "IT";
dbtype = "pgsql"; dbtype = "pgsql";
adminuser = "admin"; adminuser = "admin";
adminpassFile = config.age.secrets.nextcloud-admin-pwd.path; adminpassFile = config.age.secrets.nextcloud-admin-pwd.path;
@ -113,17 +115,24 @@ in
cospend cospend
memories memories
tasks tasks
onlyoffice # onlyoffice
# twofactor_totp # oidc
user_oidc richdocuments
; ;
}; };
}; };
onlyoffice = { collabora-online = {
enable = true; enable = true;
hostname = "onlyoffice.${cfg.proxy.domain}"; settings = {
host = [
''127\.0\.0\.1''
"::1"
];
storage.wopi."@allow" = true;
};
# hostname = "office.${cfg.proxy.domain}";
}; };
nginx.virtualHosts = { nginx.virtualHosts = {
@ -135,6 +144,8 @@ in
}; };
networking.firewall.allowedTCPPorts = [ 9980 ];
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
exiftool exiftool
ffmpeg ffmpeg
@ -153,9 +164,9 @@ in
reverse_proxy http://${host}:80 reverse_proxy http://${host}:80
import cloudflare import cloudflare
''; '';
virtualHosts."onlyoffice.${domain}".extraConfig = '' virtualHosts."office.${domain}".extraConfig = ''
import cloudflare import cloudflare
reverse_proxy http://${host}:${toString config.services.onlyoffice.port} { reverse_proxy http://${host}:${toString config.services.collabora-online.port} {
# Required to circumvent bug of Onlyoffice loading mixed non-https content # Required to circumvent bug of Onlyoffice loading mixed non-https content
header_up X-Forwarded-Proto https header_up X-Forwarded-Proto https
} }