How to debug problems with Collabora and/or Talk #1358

szaimen · 2022-11-04T11:46:11Z

szaimen
Nov 4, 2022
Maintainer

Sometimes, Collabora and/or Talk do not work as expected. Here is how to troubleshoot this.

A general step on Linux would first be to check if e.g. 127.0.0.1 yourdomain.com or e.g. 127.0.1.1 yourdomain.com was added to the /etc/hosts file on your host runnig the docker daemon. If that is the case, Remove it from the file and restart AIO which might already make things work.

If you are on Synology, check if seccomp needs to be disabled: https://github.com/nextcloud/all-in-one#how-to-disable-collaboras-seccomp-feature

If you are behind cloudflare, see https://github.com/nextcloud/all-in-one#notes-on-cloudflare-proxytunnel (there are hints regarding Nextcloud Office and Nextcloud Talk)

If AIO is behind a reverse proxy, make sure that websocket are enabled in your reverse proxy config.

Afterwards, while the containers are running, do the following:

Collabora (Nextcloud Office)

First, visit https://yourdomain.com/settings/admin/richdocuments and if you see the Allow list for WOPI requests input field (If you dont see the field, just skip this step), add ,0.0.0.0/0 to it. This might already resolve you connection issue. However it is not secure as you allow all ip-addresses to connect by doing so.

If this makes it work, you will next need to find out the ip-address that is needed here and put it additionally into the wopi-allowlist instead of 0.0.0.0/0. One way to find the correct one out is to remove the 0.0.0.0/0 from the list again, setting the loglevel to 1 with sudo docker exec --user www-data -it nextcloud-aio-nextcloud php occ config:system:set loglevel --value=1 and try to open a collabora document. Then it should log the ip-address that was used in https://yourdomain.com/settings/admin/logging and you can simply add this ip-address to the wopi-allowlist instead of 0.0.0.0/0. Now you can reset the loglevel with sudo docker exec --user www-data -it nextcloud-aio-nextcloud php occ config:system:set loglevel --value=2

If the steps above do not make it work, see the debugging steps below:

Run the following commands on your server:

# Go into the container
sudo docker exec -it nextcloud-aio-nextcloud bash

# Now inside the container
curl -vvv https://$NC_DOMAIN:443/hosting/discovery
exit

When this is done, Please post the output into your thread and also post all collabora container logs in your thread in order to help you further

Nextcloud Talk

# Go into the container
sudo docker exec -it nextcloud-aio-nextcloud bash

# Now inside the container
curl -vvv https://$NC_DOMAIN:443/standalone-signaling/api/v1/welcome
exit

When this is done, Please post the output into your thread and also post all talk container logs in your thread in order to help you further

freqq68 · 2023-01-07T14:16:34Z

freqq68
Jan 7, 2023

Thank's !! That's helped me a lot, just adding the 0.0.0.0....

0 replies

MathieuSibret-UCLL · 2023-01-09T17:43:03Z

MathieuSibret-UCLL
Jan 9, 2023

Is there a way to do this securely ? removing all wopi adresses (same as adding 0.0.0.0/0) works for me but I would rather use a safe way to do thatand not just accept all adresses.

7 replies

szaimen Jan 9, 2023
Maintainer Author

Just try all of corresponding ips. If one of them makes it work, you have found the one you need.

szaimen Jan 9, 2023
Maintainer Author

Likely the ip of the reverse proxy...

MathieuSibret-UCLL Jan 9, 2023

Ok, I tried some of my internal ip's and found out that nothing worked. Then remembered I'm using cloudflare and entered all ip addresses cloudflare uses* and it worked.

Now I'm just wondering, does that solves the security flaw or not really ?

*(which are: 103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,104.16.0.0/13,104.24.0.0/14,108.162.192.0/18,131.0.72.0/22,141.101.64.0/18,162.158.0.0/15,172.64.0.0/13,173.245.48.0/20,188.114.96.0/20,190.93.240.0/20,197.234.240.0/22,198.41.128.0/17)

szaimen Jan 9, 2023
Maintainer Author

Now I'm just wondering, does that solves the security flaw or not really ?

I guess it is probably better than using 0.0.0.0/0 but still not that great.

MathieuSibret-UCLL Jan 11, 2023

Using the cloudflaire ip's works, but I would still prefere using a safer way to do it.
I checked my docker network and inspected the nextcloud-aio network and got this back

(https://pastebin.com/3LX82V3J)
[ { "Name": "nextcloud-aio", "Id": "b0f5427fbf8119c63e955c2cb563c715022b7851eb6e423c1f3e2fe2c726f23e", "Created": "2022-12-25T02:09:30.330519061+01:00", "Scope": "local", "Driver": "bridge", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": null, "Config": [ { "Subnet": "172.20.0.0/16", "Gateway": "172.20.0.1" } ] }, "Internal": false, "Attachable": false, "Ingress": false, "ConfigFrom": { "Network": "" }, "ConfigOnly": false, "Containers": { "03dda7bfc653b34d417ac127504167b5ea177257d60dfa12ac31cc6ed71606ae": { "Name": "nextcloud-aio-clamav", "EndpointID": "9e0e3ca46a02fd6b37c8cd4a7a812944c7021ca1f6322bcec83f4f25c1dad59d", "MacAddress": "02:42:ac:14:00:03", "IPv4Address": "172.20.0.3/16", "IPv6Address": "" }, "1a01120f8bf8c38e242b886ab23e45c7bd2a086eb97cfa8eb49820540b96c972": { "Name": "nextcloud-aio-talk", "EndpointID": "819f19f7dea951ec7828a662be0e58e436d1cc07f55bfb7fbaa65682ea64b502", "MacAddress": "02:42:ac:14:00:0a", "IPv4Address": "172.20.0.10/16", "IPv6Address": "" }, "4f88418e7c5c7a18c69b36b6109ecf23d6f0a7fd22e4dcc01ad7f2f13bc94fc7": { "Name": "nextcloud-aio-apache", "EndpointID": "59283b936d594e16f16a78b9348f5a193839a9e486d77d98146abcda46a230e6", "MacAddress": "02:42:ac:14:00:02", "IPv4Address": "172.20.0.2/16", "IPv6Address": "" }, "59ad7eb2e3db83bac1f2d9eddf6f406b94df040758a1ef2fab199d8046a12f5b": { "Name": "nextcloud-aio-imaginary", "EndpointID": "a2edbcef1bc02b0bb8c4b28e42114592956085cad6833436b9326674b9691082", "MacAddress": "02:42:ac:14:00:07", "IPv4Address": "172.20.0.7/16", "IPv6Address": "" }, "60e342d06a8aaac8f7d98168e6894089a43c39a7703afd1131fe6e396b425533": { "Name": "nextcloud-aio-fulltextsearch", "EndpointID": "01ce6ad1906d0f84651109916d9a172601d51dbba2654cd5ea8c32dd3edf59f7", "MacAddress": "02:42:ac:14:00:06", "IPv4Address": "172.20.0.6/16", "IPv6Address": "" }, "61f675aebe08dc23fb785248e0765bdc0e7ad91526e2fede8c080b8d98983d1f": { "Name": "nextcloud-aio-collabora", "EndpointID": "195f162c03a24967d184d6e43587f2c1a4fcced8b8648f2224fa7cf62ab6783c", "MacAddress": "02:42:ac:14:00:04", "IPv4Address": "172.20.0.4/16", "IPv6Address": "" }, "6402459b5de3d2172c72d3f830783861ac3ec398a3a2831743d39e3422b81035": { "Name": "nextcloud-aio-redis", "EndpointID": "7ddb150b70a9f5505bf4e9b09a0a9eda67e92c460aa643687a596ec7360bd4ed", "MacAddress": "02:42:ac:14:00:09", "IPv4Address": "172.20.0.9/16", "IPv6Address": "" }, "6669d47703cc00a672bb975bb4fd8a588cae9359608979e527060c9bca2f47e4": { "Name": "nextcloud-aio-nextcloud", "EndpointID": "751f83e87d718ee0cc07a4131ff49bc19c5bb3550856d0b789edb24be8b8d3d7", "MacAddress": "02:42:ac:14:00:08", "IPv4Address": "172.20.0.8/16", "IPv6Address": "" }, "a7ac3c63b9e4e52c5759925ba1a67b4fdee9557d30fe11654d461dd3e4444dd3": { "Name": "nextcloud-aio-database", "EndpointID": "956d2f95cf338019cb118aafb72c3ec186778e9301b1cc49fac1add4ed4ec2e9", "MacAddress": "02:42:ac:14:00:05", "IPv4Address": "172.20.0.5/16", "IPv6Address": "" } }, "Options": { "com.docker.network.bridge.enable_icc": "true" }, "Labels": {} } ]

And ether entering the scope: 172.20.0.0/16 or even 172.20.0.4/16 and finally 172.20.0.4 did not work. Do you have any last resort suggestion ?
And for some reason with the suspicious connection plugin I'm able to see my remote connection being a cloudflare ip and when leaving only this on in the wopi field it's still works... But correct me if I'm wrong, aren't we supposed to enter the collabora ip adress?

bosspacific · 2023-01-10T00:14:15Z

bosspacific
Jan 10, 2023

Did Adding " ,0.0.0.0/0" and solve the problem.
because of the security, removed and saved again, still working without it.

6 replies

bosspacific Jan 10, 2023

Yes, I didnot had any values in that field, and added 0.0.0.0/0 and saved it.
Then tested ok.
Then removed those 0.0.0.0/0 and saved it again with blank field.
Tested ok.
Just to make sure, rebooted the server and tested, still ok.
I am curious about security, has this adres range still there but not showing ?? Saved in a config file somewhere.
Note, my server is external facing deb 10 vm.
Haluk

MathieuSibret-UCLL Jan 10, 2023

Actually if you read the additional text field underneath, you can see that when the field is empty it should accept any connection. (so it's exactly the same thing as accepting 0.0.0.0/0 ) I just suppose there was a default value registered and when you saved it just refreshed it.

And both (empty and 0.0.0.0/0) are equally not secure. Both accept all ip's.

szaimen Jan 10, 2023
Maintainer Author

Actually if you read the additional text field underneath, you can see that when the field is empty it should accept any connection. (so it's exactly the same thing as accepting 0.0.0.0/0 ) I just suppose there was a default value registered and when you saved it just refreshed it.

And both (empty and 0.0.0.0/0) are equally not secure. Both accept all ip's.

that is right

bosspacific Jan 11, 2023

if that is the case, what does saving the field values and deleting it fixes the problem?
so empty field accepts any connection and 0.0.0.0/0 does the same thing. but if I save a value in it fixes the problem..
so a config file needs to be "touched"? by saving a value in it?

MathieuSibret-UCLL Jan 11, 2023

so empty field accepts any connection and 0.0.0.0/0 does the same thing.

if that is the case, what does saving the field values and deleting it fixes the problem?

That is right.
That's just my guess. Maybe there is something completely different going on, but I suppose there is a default value (for me the field was filled in with some other ip's that weren't working.) And when you saved the 0.0.0.0/0 field and deleted it afterwards, you just changed that "default" value.

So, that's my guess based on what I've experienced with a fresh install of NC-aio and noticing the field wasn't empty at first.

szaimen · 2023-01-11T08:48:36Z

szaimen Jan 11, 2023
Maintainer Author

I see, so then is this completely unrelated to AIO. Please ask you question on https://help.nextcloud.com then.

szaimen · 2023-01-12T23:54:17Z

szaimen
Jan 12, 2023
Maintainer Author

Hi, I just added a few hints how to get the needed ip-address in an easier way.

0 replies

MathieuSibret-UCLL · 2023-01-13T20:21:06Z

MathieuSibret-UCLL
Jan 13, 2023

``When I copy in bulk the logging message I get: {"....,"time":"2023-01-13T19:38:14+00:00","remoteAddr":"162.158.233.105","user":"....}.
And this ip is on of the cloudflaire's ip's.

and using those steps:

sudo docker exec -it nextcloud-aio-nextcloud bash
curl -vvv https://$NC_DOMAIN:443/hosting/discovery`
`exit

I get

      *   Trying 172.67.193.67:443...
* Connected to sub.example.com (172.67.193.67) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com
*  start date: Jul  7 00:00:00 2022 GMT
*  expire date: Jul  7 23:59:59 2023 GMT
*  subjectAltName: host "sub.example.com" matched cert's "*.arialis.be"
*  issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* h2h3 [:method: GET]
* h2h3 [:path: /hosting/discovery]
* h2h3 [:scheme: https]
* h2h3 [:authority: sub.example.com]
* h2h3 [user-agent: curl/7.83.1]
* h2h3 [accept: */*]
* Using Stream ID: 1 (easy handle 0x1536cc7f51b0)
> GET /hosting/discovery HTTP/2
> Host: sub.example.com
> user-agent: curl/7.83.1
> accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 200 
< date: Fri, 13 Jan 2023 20:11:55 GMT
< content-type: text/xml
< content-length: 30812
< last-modified: Fri, 13 Jan 2023 20:11:55
< x-content-type-options: nosniff
< strict-transport-security: max-age=15552000; includeSubDomains; preload
< x-served-by: sub.example.com
< cf-cache-status: DYNAMIC
< server-timing: cf-q-config;dur=9.9999997473788e-06
< report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8RFDd5f0bBhynIyHlou3l0J%2BcErPydtmWwluZl8bLurySYvLFbWOLaivNYh4JmPKBott4eNKtuUMsfYy2PSVSNO%2Bchi13FHpI95iU9vvHIVbFzs9EdjsppFdiWxc%2BqRtyg%3D%3D"}],"group":"cf-nel","max_age":604800}
< nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< server: cloudflare
< cf-ray: 7890c8a63e8e83e7-BRU
< alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
< 
<wopi-discovery>
    <net-zone name="external-http">

        <!-- Writer documents -->
        <app favIconUrl="https://sub.example.com/browser/20c06f5/images/x-office-document.svg" name="writer">
            <action default="true" ext="sxw" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="odt" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="fodt" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Text template documents -->
            <action default="true" ext="stw" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="ott" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- MS Word -->
            <action default="true" ext="doc" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="dot" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- OOXML wordprocessing -->
            <action default="true" ext="docx" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="docm" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="dotx" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="dotm" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="wpd" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="pdb" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="hwp" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="wps" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="wri" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="lrf" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="mw" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="rtf" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="txt" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="fb2" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="cwk" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="pages" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="abw" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="602" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <app name="writer-global">
            <!-- Text master documents -->
            <action default="true" ext="sxg" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="odm" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Writer master document templates -->
            <action default="true" ext="otm" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <app name="writer-web">
            <action default="true" ext="oth" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Calc documents -->
        <app favIconUrl="https://sub.example.com/browser/20c06f5/images/x-office-spreadsheet.svg" name="calc">
            <action default="true" ext="sxc" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="ods" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="fods" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Spreadsheet template documents -->
            <action default="true" ext="stc" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="ots" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- MS Excel -->
            <action default="true" ext="xls" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="xla" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- OOXML spreadsheet -->
            <action default="true" ext="xltx" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="xltm" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="xlsx" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="xlsb" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="xlsm" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="dif" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="slk" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="csv" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="dbf" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="wk1" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="gnumeric" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="numbers" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Impress documents -->
        <app favIconUrl="https://sub.example.com/browser/20c06f5/images/x-office-presentation.svg" name="impress">
            <action default="true" ext="sxi" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="odp" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="fodp" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Presentation template documents -->
            <action default="true" ext="sti" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="otp" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- MS PowerPoint -->
            <action default="true" ext="ppt" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="pot" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- OOXML presentation -->
            <action default="true" ext="pptx" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="pptm" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="potx" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="potm" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="ppsx" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="cgm" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="key" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Draw documents -->
        <app name="draw">
            <action default="true" ext="sxd" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="odg" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="fodg" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Drawing template documents -->
            <action default="true" ext="std" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="otg" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <!-- Others -->
            <action ext="svg" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="dxf" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="emf" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="wmf" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="cdr" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="vsd" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="vsdx" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="vss" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="pub" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="p65" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="wpg" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action default="true" ext="fh" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="bmp" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="png" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="gif" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="tiff" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="jpg" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="jpeg" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
            <action ext="pdf" name="view_comment" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Math documents -->
        <!-- In fact Math documents are not supported at all.
             See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
        <app name="math">
            <action name="view" default="true" ext="sxm"/>
            <action name="edit" default="true" ext="odf"/>
        </app>
        -->

        <!-- Legacy MIME-type actions (compatibility) -->

        <app name="image/svg+xml">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Writer documents -->
        <app name="application/vnd.sun.xml.writer">
         <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Calc documents -->
        <app name="application/vnd.sun.xml.calc">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Impress documents -->
        <app name="application/vnd.sun.xml.impress">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Draw documents -->
        <app name="application/vnd.sun.xml.draw">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
 <!-- Chart documents -->
        <app name="application/vnd.oasis.opendocument.chart">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Text master documents -->
        <app name="application/vnd.sun.xml.writer.global">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-master">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Math documents -->
        <!-- In fact Math documents are not supported at all.
             See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
        <app name="application/vnd.sun.xml.math">
            <action name="view" default="true" ext=""/>
        </app>
        <app name="application/vnd.oasis.opendocument.formula">
            <action name="edit" default="true" ext=""/>
        </app>
        -->
        <!-- Text template documents -->
        <app name="application/vnd.sun.xml.writer.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Writer master document templates -->
        <app name="application/vnd.oasis.opendocument.text-master-template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Spreadsheet template documents -->
        <app name="application/vnd.sun.xml.calc.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet-template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Presentation template documents -->
        <app name="application/vnd.sun.xml.impress.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation-template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Drawing template documents -->
        <app name="application/vnd.sun.xml.draw.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics-template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- MS Word -->
        <app name="application/msword">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/msword">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- MS Excel -->
        <app name="application/vnd.ms-excel">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- MS PowerPoint -->
        <app name="application/vnd.ms-powerpoint">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- OOXML wordprocessing -->
        <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.document">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
         <app name="application/vnd.ms-word.document.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-word.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- OOXML spreadsheet -->
        <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.sheet.binary.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.sheet.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- OOXML presentation -->
        <app name="application/vnd.openxmlformats-officedocument.presentationml.presentation">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint.presentation.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.presentationml.template">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- Others -->
        <app name="application/vnd.wordperfect">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-aportisdoc">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-hwp">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-works">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-mswrite">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-dif-document">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="text/spreadsheet">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="text/csv">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-dbase">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.lotus-1-2-3">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/cgm">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/vnd.dxf">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/x-emf">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/x-wmf">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/coreldraw">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.visio2013">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.visio">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.ms-visio.drawing">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-mspublisher">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-sony-bbeb">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-gnumeric">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/macwriteii">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-iwork-numbers-sffnumbers">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-web">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
         <app name="application/x-pagemaker">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="text/rtf">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="text/plain">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-fictionbook+xml">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/clarisworks">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/x-wpg">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-iwork-pages-sffpages">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.presentationml.slideshow">
            <action default="true" ext="" name="edit" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-iwork-keynote-sffkey">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-abiword">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/x-freehand">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/vnd.sun.xml.chart">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/x-t602">
            <action default="true" ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/bmp">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/png">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/gif">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/tiff">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/jpg">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="image/jpeg">
            <action ext="" name="view" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>
        <app name="application/pdf">
            <action ext="" name="view_comment" urlsrc="https://sub.example.com/browser/20c06f5/cool.html?"/>
        </app>

        <!-- End of legacy MIME-type actions -->

        <app name="Capabilities">
            <action ext="" name="getinfo" urlsrc="https://sub.example.com/hosting/capabilities"/>
        </app>
    </net-zone>
<proof-key exponent="AQAB" modulus="uNmMZyvOioeuJLXmTjOoVMc46tkRNklhAWzV4bAqXURrEytpE/G3z1x5jWLo/eqoKQwmmCnAZx9DO/CGC7zcECT1FR+cQlDYoO9WjbzVlRrBiFZkRXmDY7duWJQNATkxzoKSFNSCBwg6KrN2LUHddSIAcRujUWCrPclC6p+PXEoRVssZpi+nsoEc8NREV9iHVgEUTxBSEHbCYNOdB5uL51LyI589TlZaCNHaZEYPk83XpKUfSr9/kItrmOX9MT/GFA0cxmc/0PyN7ItupYas3lnHONESLShsDH2VexDSu3xvEyGAs2TPgAPC4Rv5VnfhN0xedWMixOK9u0B/sC+AdQ==" oldexponent="AQAB" oldmodulus="uNmMZyvOioeuJLXmTjOoVMc46tkRNklhAWzV4bAqXURrEytpE/G3z1x5jWLo/eqoKQwmmCnAZx9DO/CGC7zcECT1FR+cQlDYoO9WjbzVlRrBiFZkRXmDY7duWJQNATkxzoKSFNSCBwg6KrN2LUHddSIA* Connection #0 to host sub.example.com left intact
cRujUWCrPclC6p+PXEoRVssZpi+nsoEc8NREV9iHVgEUTxBSEHbCYNOdB5uL51LyI589TlZaCNHaZEYPk83XpKUfSr9/kItrmOX9MT/GFA0cxmc/0PyN7ItupYas3lnHONESLShsDH2VexDSu3xvEyGAs2TPgAPC4Rv5VnfhN0xedWMixOK9u0B/sC+AdQ==" oldvalue="BgIAAACkAABSU0ExAAgAAAEAAQB1gC+wf0C7veLEImN1Xkw34XdW+RvhwgOAz2SzgCETb3y70hB7lX0MbCgtEtE4x1nerIalbovsjfzQP2fGHA0Uxj8x/eWYa4uQf79KH6Wk182TD0Zk2tEIWlZOPZ8j8lLni5sHndNgwnYQUhBPFAFWh9hXRNTwHIGypy+mGctWEUpcj5/qQsk9q2BRoxtxACJ13UEtdrMqOggHgtQUkoLOMTkBDZRYbrdjg3lFZFaIwRqV1byNVu+g2FBCnB8V9SQQ3LwLhvA7Qx9nwCmYJgwpqOr96GKNeVzPt/ETaSsTa0RdKrDh1WwBYUk2EdnqOMdUqDNO5rUkroeKzitnjNm4" value="BgIAAACkAABSU0ExAAgAAAEAAQB1gC+wf0C7veLEImN1Xkw34XdW+RvhwgOAz2SzgCETb3y70hB7lX0MbCgtEtE4x1nerIalbovsjfzQP2fGHA0Uxj8x/eWYa4uQf79KH6Wk182TD0Zk2tEIWlZOPZ8j8lLni5sHndNgwnYQUhBPFAFWh9hXRNTwHIGypy+mGctWEUpcj5/qQsk9q2BRoxtxACJ13UEtdrMqOggHgtQUkoLOMTkBDZRYbrdjg3lFZFaIwRqV1byNVu+g2FBCnB8V9SQQ3LwLhvA7Qx9nwCmYJgwpqOr96GKNeVzPt/ETaSsTa0RdKrDh1WwBYUk2EdnqOMdUqDNO5rUkroeKzitnjNm4"/></wopi-discovery>

3 replies

szaimen Jan 13, 2023
Maintainer Author

And this ip is on of the cloudflaire's ip's.

All right, then you need to put the ip-address that you get in the logs into the wopi-allowlist as described.

MathieuSibret-UCLL Jan 13, 2023

Ok, and this one will not change ? And do I need to just put the IP adress or Ip range ?

szaimen Jan 13, 2023
Maintainer Author

Ok, and this one will not change ?

I dont know. Better to ask that at a cloudflare forum probably.

And do I need to just put the IP adress or Ip range ?

If it does not change, you should be able to use the ip-address and dont need the range

EeveeEuphoria · 2023-01-20T07:49:57Z

EeveeEuphoria
Jan 20, 2023

Whenever I try to do the former method of checking the logs, I get wildly different IPs every time I try to do this, all of which correlate with Cloudflare's IP ranges. And when I try the method involving using bash inside the docker container, I get an IP that remains consistent, but is one that also doesn't work when put into the WOPI field. Unless I'm misunderstanding and I'm supposed to put like, IPADDRESS/16 or something like the other addresses have.

For context, my home server is setup like this:
Nginx Reverse Proxy that is set up to connect to a different local server, which hosts my website on apache (not on port 80), and this nextcloud AIO (followed the reverse proxy setup to a tee). This all goes to Cloudflare DNS where it is proxied. I'm hoping it's not Cloudflare that's causing the issue here, because otherwise I don't know how to solve this.

3 replies

szaimen Jan 20, 2023
Maintainer Author

I supose then you need to allow all cloudflares ip-ranges. I'll adjust the documentation.

szaimen Jan 21, 2023
Maintainer Author

Will be improved with #1819

EeveeEuphoria Jan 21, 2023

Thanks!

Fred-DTV · 2023-01-28T16:13:59Z

Fred-DTV
Jan 28, 2023

I am having a weird issue with the Talk High-performance backend in my AIO installation.

The standard link which is inserted (and I guess is supposed to direct to an internal signaling server) doesn't work and it stops the whole Talk app from being able to send and receive messages.
However, when I delete the link, everything works fine, but unfortunately with every daily backup the standard link is inserted again and it it stops Talk from working again.
This is the URL which is being inserted: https://my.sub.domain.live/standalone-signaling/

I have a valid SSL certificate and opened the ports 3478 TCP+UDP
This is the error message form the log:
https://pastebin.com/xBaa6Znm

The simplest solution for me would be to stop the link from appearing again after each backup, but I don't know how to do that...
And I can't leave it empty either, like the descriptions says. It will just have the standard URL after the next reboot again

The above mentioned curl command returns this log which looks like it can actually communicate with the server?!

% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [19 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3826 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [78 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
GET /standalone-signaling/api/v1/welcome HTTP/2
Host: xxx.xxx.xxx.live
user-agent: curl/7.79.1
accept: */*
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [57 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [57 bytes data]
< HTTP/2 200
< server: nginx
< date: Sat, 28 Jan 2023 15:40:13 GMT
< content-type: application/json; charset=utf-8
< content-length: 94
< x-spreed-signaling-features: audio-video-permissions, hello-v2, incall-all, mcu, simulcast, transient-data, update-sdp, welcome
<
{ [94 bytes data]
100 94 100 94 0 0 784 0 --:--:-- --:--:-- --:--:-- 789
{"nextcloud-spreed-signaling":"Welcome","version":"33dc5a554b496bd253bedbecc6755de514a64867"}

12 replies

szaimen Feb 1, 2023
Maintainer Author

Okay, can you follow the instructions given here? #1358 (comment)

Fred-DTV Feb 1, 2023

First, visit https://yourdomain.com/settings/admin/richdocuments and add ,0.0.0.0/0 to the Allow list for WOPI requests input field. This might already resolve you connection issue. However it is not secure as you allow all ip-addresses to connect by doing so.

Unfortunately there is no Allow list in my settings

And this is the result of the script:

% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [19 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [3826 bytes data]
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
{ [80 bytes data]
* TLSv1.3 (IN), TLS handshake, Finished (20):
{ [52 bytes data]
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
} [1 bytes data]
* TLSv1.3 (OUT), TLS handshake, Finished (20):
} [52 bytes data]
GET /hosting/discovery HTTP/2
Host: next.at.dtv.live
user-agent: curl/7.79.1
accept: */*
{ [5 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [57 bytes data]
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
{ [57 bytes data]
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:02 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:03 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:04 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:05 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:06 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:07 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:08 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:09 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:10 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:11 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:12 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:13 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:14 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:15 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:16 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:17 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:18 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:19 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:20 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:21 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:22 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:23 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:24 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:25 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:26 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:27 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:28 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:29 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:30 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:31 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:32 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:33 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:34 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:35 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:36 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:37 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:38 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:39 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:40 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:41 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:42 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:43 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:44 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:45 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:46 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:47 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:48 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:49 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:50 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:51 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:52 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:53 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:54 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:55 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:56 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:57 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:58 --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:59 --:--:-- 0< HTTP/2 504
< server: nginx
< date: Wed, 01 Feb 2023 17:59:08 GMT
< content-type: text/html
< content-length: 11939
< etag: "62a83cc4-2ea3"
<
{ [11939 bytes data]

szaimen Feb 1, 2023
Maintainer Author

Ah I see. So that would mean that problaly something, like e.g. websockets indeed do not work on your instance...

szaimen Feb 1, 2023
Maintainer Author

Probably that would need to be fixed in your Synology Reverse Proxy somehow...

Fred-DTV Feb 1, 2023

Ok for whatever reason Talk is working now :D
I had websockets enabled on the reverse proxy rules for the actual domain on port 443. I haven't had it enabled on a temporary reverse proxy rule for another domain (talk.xxx.xx.live) I set up to test if it would work with another port (3478).
I added it now there two and the talk high-perfomance backend connects EVEN THOUGH it is on another URL. Don't really understand how this is working, but sometimes ignorance is bliss haha

Collabora is working with the internal CODE Server installed. And it is showing the WOPI Allow list now too:

Thanks so much for your help and have a great evening!

jquiros2 · 2023-02-08T15:26:13Z

jquiros2
Feb 8, 2023

Leaving this here in case it saves someone time.

I was having trouble getting docker nexctloud aio with nginx reverse proxy working with collabora.

Using the steps above I realized curl -vvv https://$NC_DOMAIN:443/hosting/discovery from within the NC container was getting a 502 error.

Checking docker network inspect nextcloud-aio, I noticed the nextcloud-aio-collabora was not included in the network.

I went to https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md and compared to my nginx site config, and realized I had left a few things out. NC had been working fine for months but I had not tried collabora so had not noticed.

I had left out http2 in the initial
listen 443 ssl http2; line, and had also left out these important bits:

        client_body_buffer_size 512k;
        proxy_read_timeout 86400s;
        client_max_body_size 0;

        # Websocket
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;

Oh, and I suspect the main error was having left out
resolver localhost;

which probably made nc try to connect to collaborate through the public ip.

So- another duh- read the docs! error.

Thanks again, @szaimen!

0 replies

patrick-5546 · 2023-02-20T06:44:37Z

patrick-5546
Feb 20, 2023

When I try to open a document it loads indefinitely

I am using the built-in CODE and added ,0.0.0.0/0 to the allow list for WOPI requests.

Here is the output of `curl -vvv https://$NC_DOMAIN:443/hosting/discovery`

*Note:* I replaced my nextcloud server URL with nextcloud.server.url

*   Trying 172.67.180.231:443...
* Connected to nextcloud.server.url (172.67.180.231) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sni.cloudflaressl.com
*  start date: Feb 18 00:00:00 2023 GMT
*  expire date: Feb 17 23:59:59 2024 GMT
*  subjectAltName: host "nextcloud.server.url" matched cert's "*.server.url"
*  issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* h2h3 [:method: GET]
* h2h3 [:path: /hosting/discovery]
* h2h3 [:scheme: https]
* h2h3 [:authority: nextcloud.server.url]
* h2h3 [user-agent: curl/7.83.1]
* h2h3 [accept: */*]
* Using Stream ID: 1 (easy handle 0x14a6db5131b0)
> GET /hosting/discovery HTTP/2
> Host: nextcloud.server.url
> user-agent: curl/7.83.1
> accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 200
< date: Mon, 20 Feb 2023 06:25:14 GMT
< content-type: text/xml
< content-length: 33304
< last-modified: Mon, 20 Feb 2023 06:25:14
< x-content-type-options: nosniff
< strict-transport-security: max-age=63072000;includeSubDomains; preload
< x-served-by: nextcloud.server.url
< cf-cache-status: DYNAMIC
< report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eNRfdMEU9%2Bx9OAegqlG6CyYRkDMh%2Bt9EUrr%2Bz40Pd4bEu4AFSNQ60EZxqD7bL8QLrh3puxtfVdG%2FY1AkD%2FrLdl9HTMBt5TFxUENv29UMcbdkHhxH6wHl0ydcDg%2FWZJ%2FyIgDchLIxuGNCUcOotCMa"}],"group":"cf-nel","max_age":604800}
< nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< server: cloudflare
< cf-ray: 79c529f1bb218405-YVR
< alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
<
<wopi-discovery>
    <net-zone name="external-http">

        <!-- Writer documents -->
        <app favIconUrl="https://nextcloud.server.url/browser/719ae9b/images/x-office-document.svg" name="writer">
            <action default="true" ext="sxw" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="odt" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="fodt" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Text template documents -->
            <action default="true" ext="stw" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="ott" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- MS Word -->
            <action default="true" ext="doc" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="dot" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- OOXML wordprocessing -->
            <action default="true" ext="docx" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="docm" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="dotx" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="dotm" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="wpd" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="pdb" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="hwp" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="wps" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="wri" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="lrf" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="mw" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="rtf" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="txt" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="fb2" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="cwk" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="pages" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="abw" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="602" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <app name="writer-global">
            <!-- Text master documents -->
            <action default="true" ext="sxg" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="odm" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Writer master document templates -->
            <action default="true" ext="otm" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <app name="writer-web">
            <action default="true" ext="oth" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Calc documents -->
        <app favIconUrl="https://nextcloud.server.url/browser/719ae9b/images/x-office-spreadsheet.svg" name="calc">
            <action default="true" ext="sxc" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="ods" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="fods" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Spreadsheet template documents -->
            <action default="true" ext="stc" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="ots" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- MS Excel -->
            <action default="true" ext="xls" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="xla" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- OOXML spreadsheet -->
            <action default="true" ext="xltx" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="xltm" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="xlsx" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="xlsb" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="xlsm" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="dif" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="slk" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="csv" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="dbf" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="wk1" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="gnumeric" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="numbers" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Impress documents -->
        <app favIconUrl="https://nextcloud.server.url/browser/719ae9b/images/x-office-presentation.svg" name="impress">
            <action default="true" ext="sxi" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="odp" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="fodp" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Presentation template documents -->
            <action default="true" ext="sti" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="otp" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- MS PowerPoint -->
            <action default="true" ext="ppt" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="pot" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- OOXML presentation -->
            <action default="true" ext="pptx" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="pptm" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="potx" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="potm" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="ppsx" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="cgm" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="key" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Draw documents -->
        <app name="draw">
            <action default="true" ext="sxd" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="odg" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="fodg" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Drawing template documents -->
            <action default="true" ext="std" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="otg" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <!-- Others -->
            <action ext="svg" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="dxf" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="emf" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="wmf" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="cdr" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="vsd" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="vsdx" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="vss" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="pub" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="p65" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="wpg" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action default="true" ext="fh" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="bmp" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="png" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="gif" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="tiff" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="jpg" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="jpeg" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
            <action ext="pdf" name="view_comment" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Math documents -->
        <!-- In fact Math documents are not supported at all.
             See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
        <app name="math">
            <action name="view" default="true" ext="sxm"/>
            <action name="edit" default="true" ext="odf"/>
        </app>
        -->

        <!-- Legacy MIME-type actions (compatibility) -->

        <app name="image/svg+xml">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Writer documents -->
        <app name="application/vnd.sun.xml.writer">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Calc documents -->
        <app name="application/vnd.sun.xml.calc">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Impress documents -->
        <app name="application/vnd.sun.xml.impress">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Draw documents -->
        <app name="application/vnd.sun.xml.draw">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Chart documents -->
        <app name="application/vnd.oasis.opendocument.chart">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Text master documents -->
        <app name="application/vnd.sun.xml.writer.global">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-master">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Math documents -->
        <!-- In fact Math documents are not supported at all.
             See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
        <app name="application/vnd.sun.xml.math">
            <action name="view" default="true" ext=""/>
        </app>
        <app name="application/vnd.oasis.opendocument.formula">
            <action name="edit" default="true" ext=""/>
        </app>
        -->
        <!-- Text template documents -->
        <app name="application/vnd.sun.xml.writer.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Writer master document templates -->
        <app name="application/vnd.oasis.opendocument.text-master-template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Spreadsheet template documents -->
        <app name="application/vnd.sun.xml.calc.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet-template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Presentation template documents -->
        <app name="application/vnd.sun.xml.impress.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation-template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Drawing template documents -->
        <app name="application/vnd.sun.xml.draw.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics-template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- MS Word -->
        <app name="application/msword">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/msword">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- MS Excel -->
        <app name="application/vnd.ms-excel">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- MS PowerPoint -->
        <app name="application/vnd.ms-powerpoint">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- OOXML wordprocessing -->
        <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.document">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-word.document.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-word.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- OOXML spreadsheet -->
        <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.sheet.binary.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.sheet.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- OOXML presentation -->
        <app name="application/vnd.openxmlformats-officedocument.presentationml.presentation">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint.presentation.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.presentationml.template">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- Others -->
        <app name="application/vnd.wordperfect">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-aportisdoc">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-hwp">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-works">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-mswrite">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-dif-document">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="text/spreadsheet">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="text/csv">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-dbase">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.lotus-1-2-3">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/cgm">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/vnd.dxf">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/x-emf">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/x-wmf">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/coreldraw">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.visio2013">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.visio">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.ms-visio.drawing">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-mspublisher">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-sony-bbeb">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-gnumeric">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/macwriteii">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-iwork-numbers-sffnumbers">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-web">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-pagemaker">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="text/rtf">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="text/plain">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-fictionbook+xml">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/clarisworks">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/x-wpg">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-iwork-pages-sffpages">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.presentationml.slideshow">
            <action default="true" ext="" name="edit" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-iwork-keynote-sffkey">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-abiword">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/x-freehand">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/vnd.sun.xml.chart">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/x-t602">
            <action default="true" ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/bmp">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/png">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/gif">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/tiff">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/jpg">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="image/jpeg">
            <action ext="" name="view" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>
        <app name="application/pdf">
            <action ext="" name="view_comment" urlsrc="https://nextcloud.server.url/browser/719ae9b/cool.html?"/>
        </app>

        <!-- End of legacy MIME-type actions -->

        <app name="Capabilities">
            <action ext="" name="getinfo" urlsrc="https://nextcloud.server.url/hosting/capabilities"/>
        </app>
    </net-zone>
<proof-key exponent="AQAB" modulus="3jD534IIjaYQC7Pr6Kw1Gfn5R8ORRjuBSjGy/AoC0Jb67F4/UXrHW+RSiiJPQoZiir0ZmjSEstIzE0qvfKknst7P4HNK0ulHR80URDTD69v3QfEpWzSoBjufuwYPKaD8Hi84hmK6sEwmiaom00AlhRUi61KDUQ7KTQtPoIGTeucCnRvQrImyIZFwEfPx9G2Mu76M3oxtb362d6wzkwu+4aeRKGD/wXoX1QMHnm5I1+LJY3FSn7RNDpjbjJCx7RxSJEBsx0HIKMAOjH7FfRtVWlfzlXqlXPqbjMQDQqbbjSjmkInKsiuJqJGnT2UCrHEX18sRmTUPeIChwjuhE/+q7Q==" oldexponent="AQAB" oldmodulus="3jD534IIjaYQC7Pr6Kw1Gfn5R8ORRjuBSjGy/AoC0Jb67F4/UXrHW+RSiiJPQoZiir0ZmjSEstIzE0qvfKknst7P4HNK0ulHR80URDTD69v3QfEpWzSoBjufuwYPKaD8Hi84hmK6sEwmiaom00AlhRUi61KDUQ7KTQtPoIGTeucCnRvQrImyIZFwEfPx9G2Mu76M3oxtb362d6wzkwu+4aeRKGD/wXoX1QMHnm5I1+LJY3FSn7RNDpjbjJCx7RxSJEBsx0HIKMAOjH7FfRtVWlfzlXqlXPqbjMQDQqbbjSjmkInKsiuJqJGnT2UCrHEX18sRmTUPeIChwjuhE/+q7Q==" oldvalue="BgIAAACkAABSU0E* Connection #0 to host nextcloud.server.url left intact
xAAgAAAEAAQDtqv8ToTvCoYB4DzWZEcvXF3GsAmVPp5GoiSuyyomQ5iiN26ZCA8SMm/pcpXqV81daVRt9xX6MDsAoyEHHbEAkUhztsZCM25gOTbSfUnFjyeLXSG6eBwPVF3rB/2AokafhvguTM6x3tn5vbYzejL67jG308fMRcJEhsoms0BudAud6k4GgTwtNyg5Rg1LrIhWFJUDTJqqJJkywumKGOC8e/KApDwa7nzsGqDRbKfFB99vrwzREFM1HR+nSSnPgz96yJ6l8r0oTM9KyhDSaGb2KYoZCTyKKUuRbx3pRP17s+pbQAgr8sjFKgTtGkcNH+fkZNazo67MLEKaNCILf+TDe" value="BgIAAACkAABSU0ExAAgAAAEAAQDtqv8ToTvCoYB4DzWZEcvXF3GsAmVPp5GoiSuyyomQ5iiN26ZCA8SMm/pcpXqV81daVRt9xX6MDsAoyEHHbEAkUhztsZCM25gOTbSfUnFjyeLXSG6eBwPVF3rB/2AokafhvguTM6x3tn5vbYzejL67jG308fMRcJEhsoms0BudAud6k4GgTwtNyg5Rg1LrIhWFJUDTJqqJJkywumKGOC8e/KApDwa7nzsGqDRbKfFB99vrwzREFM1HR+nSSnPgz96yJ6l8r0oTM9KyhDSaGb2KYoZCTyKKUuRbx3pRP17s+pbQAgr8sjFKgTtGkcNH+fkZNazo67MLEKaNCILf+TDe"/></wopi-discovery>

4 replies

szaimen Feb 20, 2023
Maintainer Author

built-in CODE

Do you mean this app?
https://apps.nextcloud.com/apps/richdocumentscode

patrick-5546 Feb 21, 2023

Yes

szaimen Feb 21, 2023
Maintainer Author

This app is not covered by this guide. Please remove that again, restart your sever and check if that makes things work.

patrick-5546 Feb 22, 2023

That worked, thanks!

arshubham · 2023-03-04T15:00:56Z

arshubham
Mar 4, 2023

I am facing issue with nexcloud Talk. UI is showing following error

The logs show following:

mcu_janus.go:294: Connected to Janus WebRTC Server 1.1.1 by Meetecho s.r.l.
mcu_janus.go:300: Found JANUS VideoRoom plugin 0.0.9 by Meetecho s.r.l.
mcu_janus.go:305: Data channels are supported
mcu_janus.go:307: WARNING: Full-Trickle is NOT enabled in Janus!
mcu_janus.go:311: Maximum bandwidth 1048576 bits/sec per publishing stream
mcu_janus.go:312: Maximum bandwidth 2097152 bits/sec per screensharing stream
mcu_janus.go:318: Created Janus session 489207334336114
mcu_janus.go:325: Created Janus handle 470239539702538
main.go:263: Using janus MCU
hub.go:385: Using a timeout of 10s for MCU requests
backend_server.go:105: No IPs configured for the stats endpoint, only allowing access from 127.0.0.1
main.go:339: Listening on 0.0.0.0:8081
Creating new session: 489207334336114; 0x7fb88c006820
Creating new handle in session 489207334336114: 470239539702538; 0x7fb88c006820 0x7fb88c002f40
client.go:284: Client from 172.18.0.1 has RTT of 348 ms (348.553052ms)
capabilities.go:151: Capabilities expired for https://$NC_DOMAIN/ocs/v2.php/cloud/capabilities, updating
capabilities.go:248: Could not get capabilities for https://$NC_DOMAIN/ocs/v2.php/apps/spreed/api/v3/signaling/backend: Get "https://$NC_DOMAIN/ocs/v2.php/cloud/capabilities": dial tcp 127.0.1.1:443: connect: connection refused
client.go:284: Client from 172.18.0.1 has RTT of 348 ms (348.428446ms)

The issue started happening after 4.4.1 update. I am on the 4.5.0 now but the issue persists.

# Now inside the container
curl -vvv https://$NC_DOMAIN:443/standalone-signaling/api/v1/welcome
exit

And got following:

bash-5.1# curl -vvv htps://$NC_DOMAIN:443/standalone-signaling/api/v1/welcome
* Protocol "htps" not supported or disabled in libcurl
* Closing connection -1
curl: (1) Protocol "htps" not supported or disabled in libcurl
bash-5.1# curl -vvv https://$NC_DOMAIN/standalone-signaling/api/v1/welcome
*   Trying $IP:443...
* Connected to $IP ($IP) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS alert, internal error (592):
* error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error
* Closing connection 0

I am getting the response when trying from the browser.

nextcloud-spreed-signaling | "Welcome"
version | "3c6d2d1517ab33b8db5be931e25ba2641f780c77"
</div>

`curl -H "OCS-APIRequest: true" https://$NC_DOMAIN/ocs/v2.php/cloud/capabilities`  from the pc results in a 200 resp

Ports open on talk container: ` 0.0.0.0:3478->3478/tcp, 0.0.0.0:3478->3478/udp, :::3478->3478/tcp, :::3478->3478/udp`

Please let me know if any other logs are required.

7 replies

szaimen Mar 4, 2023
Maintainer Author

Can you post the content of your /etc/hosts file here?

arshubham Mar 4, 2023

# Your system has configured 'manage_etc_hosts' as True.
# As a result, if you wish for changes to this file to persist
# then you will need to either
# a.) make changes to the master file in /etc/cloud/templates/hosts.debian.tmpl
# b.) change or remove the value of 'manage_etc_hosts' in
#     /etc/cloud/cloud.cfg or cloud-config from user-data
#
127.0.1.1  nextcloud
127.0.0.1 localhost

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

szaimen Mar 4, 2023
Maintainer Author

Can you remove nextcloud.shubhamarora.dev from your hosts file, restart AIO and check if that makes things work?

arshubham Mar 4, 2023

Thanks it is working now.
The server was setup using the digitalocean marketplace script and I just updated from there. I don't remember adding this to hosts file.

szaimen Mar 4, 2023
Maintainer Author

It looks like you'll need to do this then:

john2151 · 2023-03-05T14:20:19Z

john2151
Mar 5, 2023

Hi,
another patient with Collabora problems here ...
ERR Remote config server has response status code: 404| wsd/COOLWSD.cpp:1168
Running Nextcloud AiO v4.5.0 with an external (in the sense of separate machine) nginx proxy.
The curl command returns an SSL error

Trying Public-IP:443...
Connected to NC-domain (Public-IP) port 443 (#0)
ALPN: offers h2
ALPN: offers http/1.1
CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
TLSv1.3 (OUT), TLS handshake, Client hello (1):
TLSv1.3 (IN), TLS handshake, Server hello (2):
TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
TLSv1.3 (IN), TLS handshake, Certificate (11):
TLSv1.3 (OUT), TLS alert, unknown CA (560):
SSL certificate problem: unable to get local issuer certificate
Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

The reverse proxy has a Lets Encrypt certificate via certbot in place.

/etc/hosts file on the host does not contain the NC-domain.

I may be stupid but i don't see the input field Allow list for WOPI requests so i couldn't try to add 0.0.0.0/0 there

Not sure what the next step is so any help would be appreciated! :)

Thanks in advance!
john2151

1 reply

john2151 Mar 25, 2023

Anyone an idea?

ebildebil · 2023-03-09T15:49:19Z

ebildebil
Mar 9, 2023

Hi, I am struggling with talk.
When i try to connect a call on the android app, it connects audio only and no video is transmitted. calls from browser works fine.
The android app connects video if i delete the High performance backend and only keep the turn settings
Talk-logs.txt
. (Tried with upto 4 participants)

I am using Nginx proxy manager for reverse proxy. It was previosuly on a different host. I added trusted hosts by editing config.php. Did not solve.
Installed a new NPM on the same host as AIO. still does not work.

Is there something I can do?

Thank you!
Ebildebil

bash-5.1# curl -vvv https://$NC_DOMAIN:443/standalone-signaling/api/v1/welcome

Trying 37.247.17.112:443...
Connected to karfamily.net (37.247.17.112) port 443 (#0)
ALPN: offers h2
ALPN: offers http/1.1
CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
TLSv1.3 (OUT), TLS handshake, Client hello (1):
TLSv1.3 (IN), TLS handshake, Server hello (2):
TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
TLSv1.3 (IN), TLS handshake, Certificate (11):
TLSv1.3 (IN), TLS handshake, CERT verify (15):
TLSv1.3 (IN), TLS handshake, Finished (20):
TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.3 (OUT), TLS handshake, Finished (20):
SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
ALPN: server accepted h2
Server certificate:
subject: CN=*.ebildebils.com
start date: Mar 8 17:32:00 2023 GMT
expire date: Jun 6 17:31:59 2023 GMT
subjectAltName: host "karfamily.net" matched cert's "karfamily.net"
issuer: C=US; O=Let's Encrypt; CN=R3
SSL certificate verify ok.
Using HTTP2, server supports multiplexing
Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
h2h3 [:method: GET]
h2h3 [:path: /standalone-signaling/api/v1/welcome]
h2h3 [:scheme: https]
h2h3 [:authority: karfamily.net]
h2h3 [user-agent: curl/7.83.1]
h2h3 [accept: /]
Using Stream ID: 1 (easy handle 0x7f67e4e011b0)

GET /standalone-signaling/api/v1/welcome HTTP/2
Host: karfamily.net
user-agent: curl/7.83.1
accept: /

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
old SSL session ID is stale, removing
Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
< HTTP/2 200
< server: openresty
< date: Thu, 09 Mar 2023 15:35:16 GMT
< content-type: application/json; charset=utf-8
< content-length: 94
< x-spreed-signaling-features: audio-video-permissions, hello-v2, incall-all, mcu, simulcast, switchto, transient-data, update-sdp, welcome
< x-served-by: karfamily.net
<
{"nextcloud-spreed-signaling":"Welcome","version":"3c6d2d1517ab33b8db5be931e25ba2641f780c77"}
Connection #0 to host karfamily.net left intact
Talk-logs.txt

4 replies

szaimen Mar 9, 2023
Maintainer Author

Hi, is it possible that you run into this?
nextcloud/talk-android#2704

ebildebil Mar 10, 2023

Thank you so much! It helps me stop endless troubleshooting on my systems.

The behavior seems consistent with the issue that you've pointed to. I'll add my experience there as well.
I tried app to web and the android app transmits video that can be seen on the web browser. But the phone does not display any video.
The iphone app seems to be working fine.

In the other issue, it seemed reverting to the previous version helped. Does play-store allow that or, how can i find a previous version safely? Perhaps this way I can rule out config issues on server side (or my side)

szaimen Mar 10, 2023
Maintainer Author

In the other issue, it seemed reverting to the previous version helped. Does play-store allow that or, how can i find a previous version safely? Perhaps this way I can rule out config issues on server side (or my side)

Sorry dont know much about this. Please ask here: nextcloud/talk-android#2704

ebildebil Mar 10, 2023

For sure. Thank you once again.

punkyard · 2023-03-19T23:32:54Z

punkyard
Mar 19, 2023

I added my public IP to the WOPPI (as cloudflare zero trust tunnel hides it)

Here is my output for Talk
`curl -vvv https://$NC_DOMAIN:443/standalone-signaling/api/v1/welcome

Trying IP:443...
Connected to domain.net (IP) port 443 (#0)
ALPN: offers h2
ALPN: offers http/1.1
CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
TLSv1.3 (OUT), TLS handshake, Client hello (1):
TLSv1.3 (IN), TLS handshake, Server hello (2):
TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
TLSv1.3 (IN), TLS handshake, Certificate (11):
TLSv1.3 (IN), TLS handshake, CERT verify (15):
TLSv1.3 (IN), TLS handshake, Finished (20):
TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.3 (OUT), TLS handshake, Finished (20):
SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
ALPN: server accepted h2
Server certificate:
subject: CN=*.rez0.net
start date: Feb 24 01:23:31 2023 GMT
expire date: May 25 01:23:30 2023 GMT
subjectAltName: host "my.domain.net" matched cert's "*.domain.net"
issuer: C=US; O=Google Trust Services LLC; CN=GTS CA 1P5
SSL certificate verify ok.
Using HTTP2, server supports multiplexing
Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
h2h3 [:method: GET]
h2h3 [:path: /standalone-signaling/api/v1/welcome]
h2h3 [:scheme: https]
h2h3 [:authority: my.domain.net]
h2h3 [user-agent: curl/7.83.1]
h2h3 [accept: /]
Using Stream ID: 1 (easy handle ..)

GET /standalone-signaling/api/v1/welcome HTTP/2
Host: my.domain.net
user-agent: curl/7.83.1
accept: /

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
old SSL session ID is stale, removing
Connection state changed (MAX_CONCURRENT_STREAMS == 256)!
< HTTP/2 200
< date: Sun, 19 Mar 2023 23:28:43 GMT
< content-type: application/json; charset=utf-8
< content-length: 94
< x-spreed-signaling-features: audio-video-permissions, hello-v2, incall-all, mcu, simulcast, switchto, transient-data, update-sdp, welcome
< cf-cache-status: DYNAMIC
< report-to: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v3?s=.."}],"group":"cf-nel","max_age":604800}
< nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
< strict-transport-security: max-age=15552000; preload
< x-content-type-options: nosniff
< server: cloudflare
< cf-ray: ..-DUS
< alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
<
{"nextcloud-spreed-signaling":"Welcome","version":".."}
Connection #0 to host my.domain.net left intact`

0 replies

punkyard · 2023-03-21T07:28:55Z

punkyard
Mar 21, 2023

Hi,
I reinstalled AiO without using Cloudflare Zero Trust, but the IPs in Collabora and Talk where the same, I have to act manually to get Collabora working.
I've tried using Talk visio-call, here is the log I found:

`[spreed] Fatal: RuntimeException: There can only be one Talk backend at <>

/var/www/html/lib/private/AppFramework/Bootstrap/RegistrationContext.php line 296
OC\AppFramework\Bootstrap\RegistrationContext->registerTalkBackend("spreed", "OCA\Talk\OCP\TalkBackend")
/var/www/html/custom_apps/spreed/lib/AppInfo/Application.php line 153
OCP\AppFramework\Bootstrap\IRegistrationContext@anonymous�/var/www/html/lib/private/AppFramework/Bootstrap/RegistrationContext.php:142$18b->registerTalkBackend("OCA\Talk\OCP\TalkBackend")
/var/www/html/lib/private/AppFramework/Bootstrap/Coordinator.php line 136
OCA\Talk\AppInfo\Application->register(["OCP\AppFramew ... "])
/var/www/html/lib/private/AppFramework/Bootstrap/Coordinator.php line 95
OC\AppFramework\Bootstrap\Coordinator->registerApps(["spreed"])
/var/www/html/lib/private/Installer.php line 143
OC\AppFramework\Bootstrap\Coordinator->runLazyRegistration("spreed")
/var/www/html/lib/private/legacy/OC_App.php line 442
OC\Installer->installApp("spreed")
/var/www/html/core/Command/App/Install.php line 97
OC_App->enable("spreed")
/var/www/html/3rdparty/symfony/console/Command/Command.php line 255
OC\Core\Command\App\Install->execute(["Symfony\Compo ... "], ["Symfony\Compo ... "])
/var/www/html/3rdparty/symfony/console/Application.php line 1009
Symfony\Component\Console\Command\Command->run(["Symfony\Compo ... "], ["Symfony\Compo ... "])
/var/www/html/3rdparty/symfony/console/Application.php line 273
Symfony\Component\Console\Application->doRunCommand(["OC\Core\Command\App\Install"], ["Symfony\Compo ... "], ["Symfony\Compo ... "])
/var/www/html/3rdparty/symfony/console/Application.php line 149
Symfony\Component\Console\Application->doRun(["Symfony\Compo ... "], ["Symfony\Compo ... "])
/var/www/html/lib/private/Console/Application.php line 213
Symfony\Component\Console\Application->run(["Symfony\Compo ... "], ["Symfony\Compo ... "])
/var/www/html/console.php line 100
OC\Console\Application->run()
/var/www/html/occ line 11
require_once("/var/www/html/console.php")

at 2023-03-20T21:41:03+00:00`

Could you help me to have it working?
thanks

0 replies

mighty-services · 2023-03-21T09:23:48Z

mighty-services
Mar 21, 2023

Hy there,

the connection-error with nextcloud office appeared again after I could fix it last time. When I try to check the connection from within the conainer it sais:

I changed the ip-address/subnet of my virtual machine (which runs nextcloud AIO) and after that I got the error of a wrong dns-server setup. I changed the ip-address in the /ec/hosts file from 127.0.1.1 to the real IP-Adress of the container. But with both settings there was the connection refused error.

I added APACHE_IP_BINDING=0.0.0.0 to the environment part and the default network, so my docker-compose file looks like this right now:

version: "3.8"

volumes:
  nextcloud_aio_mastercontainer:
    name: nextcloud_aio_mastercontainer # This line is not allowed to be changed

services:
  nextcloud:
    image: nextcloud/all-in-one:beta
    restart: always
    container_name: nextcloud-aio-mastercontainer
    volumes:
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config
      - /var/run/docker.sock:/var/run/docker.sock:rodocumentation
    ports:
      - 80:80
      - 8080:8080
      - 8443:8443
    environment:
      - APACHE_PORT=11000
      - APACHE_IP_BINDING=0.0.0.0
      - NEXTCLOUD_TRUSTED_DOMAINS=cloud.example.com 10.0.9.103
      - TRUSTED_PROXIES=10.0.9.103
      - APACHE_DISABLE_REWRITE_IP=1
      - NEXTCLOUD_DATADIR=/data/ncdata
      - NEXTCLOUD_MOUNT=/mnt/
      - SKIP_DOMAIN_VALIDATION=true
      - DAILY_BACKUP=1
      - AUTOMATIC_UPDATES=1
      - COLLABORA_SECCOMP_DISABLED=true
    networks:
      - default

I also Tried to use `network_mode: host, which gave me an error on the container website sying that this is not supported.

1 reply

punkyard Mar 27, 2023

I removed trusted_proxies, didn't need trusted-domains, and removed networks.
I left AiO manage networks. I added the nextcloud_default network to the nginx proxy manager container.
In Nginx PM, I used the local_ip of the apache container with port 11000, and http protocol.
I added my public_IP to the list of WOPI requests in Administration settings > Office, and left there all the default local_IPs that where already there.

Then, for Talk,
in STUN: public_ip:443.
in TURN: only, public_ip:3478 - UDP and TCP

🤞

mighty-services · 2023-03-21T09:25:27Z

mighty-services
Mar 21, 2023

this is the dns-error coming up the with time the mastercontainer is starting:

After the error and automatic restart, it's working and the error doesn't appear again. The only error which keeps up again and again is:
NOTICE: PHP message: Could not get digest of container nextcloud/aio-apache:beta cURL error 6: Could not resolve host: auth.docker.io (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://auth.docker.io/token?service=registry.docker.io&scope=repository:nextcloud/aio-apache:pull I don´td know if that's okay or not.

Within the web UI it looks like this (by default):

I switches of the Firewall withing Ubuntu (ufw), in the Proxmox-WebManagement for this vm and on my unifi security gateway.

2 replies

mighty-services Mar 25, 2023

I found the error for this message outside my instance. My dream machine now is starting to block ads by default. Disabling it helped the connection come back up.

But the push seevice is Stil having trouble even the command to test this doesn't throws.

mighty-services Mar 25, 2023

And I didn't test talk outside my LAN

hugalafutro · 2023-03-26T22:18:23Z

hugalafutro
Mar 26, 2023

Regardless of what I put into Nextcloud Office WOPI allow list (docker network ip/24, localhost, ip of host on which the docker runs, reverse proxy ip) it only works when it's empty.

Could someone please tell me like I'm five years old: If I leave it empty, and both collabora server and nextcloud are only accessible from internet only thru https via nginx reverse proxy (9980 port is not accessible outside of local lan) are you telling me that any user with nextcloud login can still d/l w/e they want via the WOPI thing? If so, Jesus Christ on a crutch - what do I put there?

3 replies

punkyard Mar 27, 2023

if it works when it's empty .. what's the problem?
Create a test user account, login on a different machine, check .. if it works when it's empty ..

I had to add my public_ip the WOPI requests list, leave default networks.

version: "3.8"
volumes:
  nextcloud_aio_mastercontainer:
    name: nextcloud_aio_mastercontainer #
services:
  nextcloud:
    image: nextcloud/all-in-one:latest
    restart: always
    container_name: nextcloud-aio-mastercontainer #
    volumes:
      - nextcloud_aio_mastercontainer:/mnt/docker-aio-config #
      - /var/run/docker.sock:/var/run/docker.sock:ro #
    ports:
      - 8888:8080
    environment:
     - APACHE_PORT=11000
     - APACHE_IP_BINDING=0.0.0.0
     - NEXTCLOUD_MOUNT=/mnt/d0cker/nextcloud-aio/
     - NEXTCLOUD_UPLOAD_LIMIT=1G
     - NEXTCLOUD_MEMORY_LIMIT=6144M
     - NEXTCLOUD_ADDITIONAL_APKS=imagemagick libpq-dev
     - NEXTCLOUD_ADDITIONAL_PHP_EXTENSIONS=imagick pgsql

hugalafutro Mar 27, 2023

if it works when it's empty .. what's the problem?

The big warning at the top of page "You have not configured the allow-list for WOPI requests. Without this setting users may download restricted files via WOPI requests to the Nextcloud server.". The problem is the ambiguity of the warning too as nowhere on the forums or google could I find explained what it actually means nor what I asked which is if it means that "any user with nextcloud login can still d/l w/e they want via the WOPI thing?"

Create a test user account, login on a different machine, check .. if it works when it's empty ..

As I've no idea how to exploit the WOPI in such a manner how would I test it. Obviously according to the warning it is exploitable though.

The point is not to make it working by leaving it empty, the point is to find a precise value to put in and moreover the reason why is it that value in order to make the NC instance secure, as it is apparently different ip for pretty much everyone from perusing this thread. If it's public ip; which I tried to no avail; presuming it would work, am I supposed to change it every time my provider decides to rotate the address (as they use dynamic ip)?

Imagine I'm doing a presentation and suddenly my collabora doesn't work because isp just changed the public ip earlier that day and now there's 15 people watching me fumble around Nextcloud settings on the projector logging to my home vpn to find the new public ip, and they all are asking is why don't I use onedrive and office like everyone else.

punkyard Jun 20, 2023

thanks hug

IOTech17 · 2023-04-05T11:35:37Z

IOTech17
Apr 5, 2023

I cannot find a way to whitelist wopi client in the UI

I am also getting the Collabora Online should use the same protocol as the server installation. no matter what I input.

any idea?

8 replies

szaimen Apr 5, 2023
Maintainer Author

See https://github.com/nextcloud/all-in-one#notes-on-cloudflare-proxytunnel

IOTech17 Apr 5, 2023

It doesn't work behind Cloudflare zero access.

IOTech17 Apr 5, 2023

GuzzleHttp\Exception\ClientException: Client error: GET https://redacted.com/custom_apps/richdocumentscode/hosting/capabilities` resulted in a `403 Forbidden` response: <!DOCTYPE html> <html lang="en-US"> <head> <title>Just a moment...</title> <meta http-equiv="Content-Type" conte (truncated...)
/var/www/html/3rdparty/guzzlehttp/guzzle/src/Middleware.php - line 69:

GuzzleHttp\Exception\RequestException::create([ "GuzzleHttp\\Psr7\\Request"], "*** sensiti ... *", null, [], null)

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 204:

GuzzleHttp\Middleware::GuzzleHttp\{closure}("*** sensiti ... *")

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 153:

GuzzleHttp\Promise\Promise::callHandler(1, "*** sensiti ... *", null)

/var/www/html/3rdparty/guzzlehttp/promises/src/TaskQueue.php - line 48:

GuzzleHttp\Promise\Promise::GuzzleHttp\Promise\{closure}("*** sensiti ... *")

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 248:

GuzzleHttp\Promise\TaskQueue->run(true)

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 224:

GuzzleHttp\Promise\Promise->invokeWaitFn()

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 269:

GuzzleHttp\Promise\Promise->waitIfPending()

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 226:

GuzzleHttp\Promise\Promise->invokeWaitList()

/var/www/html/3rdparty/guzzlehttp/promises/src/Promise.php - line 62:

GuzzleHttp\Promise\Promise->waitIfPending()

/var/www/html/3rdparty/guzzlehttp/guzzle/src/Client.php - line 187:

GuzzleHttp\Promise\Promise->wait()

/var/www/html/lib/private/Http/Client/Client.php - line 218:

GuzzleHttp\Client->request("get", "https://hub ... s", [ "/mnt/ncda ... e])

/var/www/html/custom_apps/richdocuments/lib/Service/CapabilitiesService.php - line 136:

OC\Http\Client\Client->get("https://hub ... s", [ 45,[ true]])

/var/www/html/custom_apps/richdocuments/lib/Service/CapabilitiesService.php - line 74:

OCA\Richdocuments\Service\CapabilitiesService->refetch()

/var/www/html/custom_apps/richdocuments/lib/AppInfo/Application.php - line 80:

OCA\Richdocuments\Service\CapabilitiesService->getCapabilities()

/var/www/html/lib/private/AppFramework/Bootstrap/FunctionInjector.php - line 67:

OCA\Richdocuments\AppInfo\Application->OCA\Richdocuments\AppInfo\{closure}("*** sensiti ... *")

/var/www/html/lib/private/AppFramework/Bootstrap/BootContext.php - line 51:

OC\AppFramework\Bootstrap\FunctionInjector->injectFn([ "Closure"])

/var/www/html/custom_apps/richdocuments/lib/AppInfo/Application.php - line 135:

OC\AppFramework\Bootstrap\BootContext->injectFn([ "Closure"])

/var/www/html/lib/private/AppFramework/Bootstrap/Coordinator.php - line 190:

OCA\Richdocuments\AppInfo\Application->boot([ "OC\\AppFr ... "])

/var/www/html/lib/private/legacy/OC_App.php - line 208:

OC\AppFramework\Bootstrap\Coordinator->bootApp("richdocuments")

/var/www/html/lib/private/legacy/OC_App.php - line 141:

OC_App::loadApp("richdocuments")

/var/www/html/ocs/v1.php - line 57:

OC_App::loadApps()

/var/www/html/ocs/v2.php - line 23:

require_once("/var/www/html/ocs/v1.php")`

szaimen Apr 5, 2023
Maintainer Author

In the link that I've posted are instructions for Nextcloud Office when behind cloudflare.

IOTech17 Apr 5, 2023

In the link that I've posted are instructions for Nextcloud Office when behind cloudflare.

There is the proxy from cloudflare, then you also have the cloudflare zero trust access.

I am trying different thing and I will let you know

punkyard · 2023-04-05T21:37:07Z

punkyard
Apr 5, 2023

try using the network host mode, and open the port in your firewall.

3 replies

punkyard Apr 6, 2023

sorry, I mean cloudflare zero trust didn't work for me.
I used nginx proxy manager and added network_mode: "host" to my compose file, and opened the port on my firewall. My main problem wasn't collabora, but Talk that wouldn't work.
Probably because the master_container creates other containers, on a different network ..

I added my domain in the turn server option in NC admin panel ..

punkyard Jun 20, 2023

with cloudflare proxy, the Talk container is marked Unhealthy in Portainer.

punkyard Jun 20, 2023

my 2 rules in UFW for Talk container :
3478/udp ALLOW Anywhere
3478/tcp ALLOW Anywhere

my rules for NPM:
443 ALLOW Anywhere
81 ALLOW Anywhere
80 ALLOW Anywhere (used by let's encrypt)

Kelesal · 2023-05-04T14:26:57Z

Kelesal
May 4, 2023

Nextcloud AIO on CentOS with nginx proxy. I get blank screen when try to open .odt file. On https://mynextcloud.domain/settings/admin/richdocuments - green mark
Adding ,0.0.0.0/0 to allowed addresses not work.

/etc/hosts
127.0.0.1 localhost
Domain name changed from real to mynextcloud.domain

Nginx conf

server {
        listen 443 ssl;
        server_name mynextcloud.domain;
        ssl_certificate /etc/letsencrypt/live/mynextcloud.domain/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/mynextcloud.domain/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
        location / {
                proxy_pass http://localhost:11000/;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                client_max_body_size 0;
                # Websocket
                proxy_http_version 1.1;
                proxy_set_header Connection "Upgrade";
                proxy_set_header Upgrade $http_upgrade;
        }

Collabora log from AIO interface

wsd-00001-00040 2023-05-04 16:21:24.645349 +0300 [ remotefontconfig_poll ] ERR  Remote config server has response status code: 502| wsd/COOLWSD.cpp:1171
wsd-00001-00038 2023-05-04 16:23:21.158857 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=xns4uicmZOAy6fxD5x4S0shINuucpF9a&access_token_ttl=1683242600000/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:23:21.344761 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=xns4uicmZOAy6fxD5x4S0shINuucpF9a&access_token_ttl=1683242600000&permission=edit/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:23:27.005989 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=xns4uicmZOAy6fxD5x4S0shINuucpF9a&access_token_ttl=1683242600000&permission=edit/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:23:30.994059 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=sOfLg80N8H7dsVomPbTcj2yjQKksdZUy&access_token_ttl=1683242610000/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:23:31.483617 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=sOfLg80N8H7dsVomPbTcj2yjQKksdZUy&access_token_ttl=1683242610000&permission=edit/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:26:41.249455 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=sOfLg80N8H7dsVomPbTcj2yjQKksdZUy&access_token_ttl=1683242610000&permission=edit/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:26:45.084018 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=yzLYXGoji7OAQ3FQvRZQUPRKl8sW4Ea9&access_token_ttl=1683242804000/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969
wsd-00001-00038 2023-05-04 16:26:45.185667 +0300 [ websrv_poll ] ERR  #28: #28 Exception while processing incoming request: [GET /cool/https:/mynextcloud.domain/index.php/apps/richdocuments/wopi/files/14635_ocypj7xcx9uf%3Faccess_token=yzLYXGoji7OAQ3FQvRZQUPRKl8sW4Ea9&access_token_ttl=1683242804000&permission=edit/ws?WOPISrc=https%3A%2F%2Fcloud.evsin.net%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F14635_ocypj7xcx9uf&compat=/ws HTTP/1.1
d URI syntax| wsd/COOLWSD.cpp:3969

curl -vvv https://$NC_DOMAIN:443/hosting/discovery

bash-5.1# curl -vvv https://$NC_DOMAIN:443/hosting/discovery
*   Trying 172.20.0.200:443...
* Connected to mynextcloud.domain (172.20.0.200) port 443 (#0)
* ALPN: offers h2
* ALPN: offers http/1.1
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
*  subject: CN=mynextcloud.domain
*  start date: Apr 15 08:46:01 2023 GMT
*  expire date: Jul 14 08:46:00 2023 GMT
*  subjectAltName: host "mynextcloud.domain" matched cert's "mynextcloud.domain"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* h2h3 [:method: GET]
* h2h3 [:path: /hosting/discovery]
* h2h3 [:scheme: https]
* h2h3 [:authority: mynextcloud.domain]
* h2h3 [user-agent: curl/7.83.1]
* h2h3 [accept: */*]
* Using Stream ID: 1 (easy handle 0x7f0a9c60a1b0)
> GET /hosting/discovery HTTP/2
> Host: mynextcloud.domain
> user-agent: curl/7.83.1
> accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
< HTTP/2 200
< server: nginx
< date: Thu, 04 May 2023 13:31:26 GMT
< content-type: text/xml; charset=utf-8
< content-length: 30990
< last-modified: Thu, 04 May 2023 13:31:26
< x-content-type-options: nosniff
<
<wopi-discovery>
    <net-zone name="external-http">

        <!-- Writer documents -->
        <app favIconUrl="https://mynextcloud.domain/browser/6ba7057/images/x-office-document.svg" name="writer">
            <action default="true" ext="sxw" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="odt" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="fodt" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Text template documents -->
            <action default="true" ext="stw" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="ott" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- MS Word -->
            <action default="true" ext="doc" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="dot" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- OOXML wordprocessing -->
            <action default="true" ext="docx" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="docm" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="dotx" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="dotm" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="wpd" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="pdb" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="hwp" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="wps" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="wri" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="lrf" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="mw" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="rtf" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="txt" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="fb2" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="cwk" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="pages" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="abw" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="602" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <app name="writer-global">
            <!-- Text master documents -->
            <action default="true" ext="sxg" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="odm" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Writer master document templates -->
            <action default="true" ext="otm" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <app name="writer-web">
            <action default="true" ext="oth" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Calc documents -->
        <app favIconUrl="https://mynextcloud.domain/browser/6ba7057/images/x-office-spreadsheet.svg" name="calc">
            <action default="true" ext="sxc" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="ods" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="fods" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Spreadsheet template documents -->
            <action default="true" ext="stc" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="ots" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- MS Excel -->
            <action default="true" ext="xls" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="xla" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- OOXML spreadsheet -->
            <action default="true" ext="xltx" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="xltm" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="xlsx" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="xlsb" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="xlsm" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="dif" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="slk" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="csv" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="dbf" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="wk1" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="gnumeric" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="numbers" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Impress documents -->
        <app favIconUrl="https://mynextcloud.domain/browser/6ba7057/images/x-office-presentation.svg" name="impress">
            <action default="true" ext="sxi" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="odp" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="fodp" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Presentation template documents -->
            <action default="true" ext="sti" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="otp" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- MS PowerPoint -->
            <action default="true" ext="ppt" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="pot" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- OOXML presentation -->
            <action default="true" ext="pptx" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="pptm" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="potx" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="potm" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="ppsx" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Others -->
            <action default="true" ext="cgm" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="key" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Draw documents -->
        <app name="draw">
            <action default="true" ext="sxd" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="odg" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="fodg" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Drawing template documents -->
            <action default="true" ext="std" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="otg" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <!-- Others -->
            <action ext="svg" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="dxf" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="emf" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="wmf" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="cdr" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="vsd" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="vsdx" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="vss" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="pub" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="p65" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="wpg" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action default="true" ext="fh" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="bmp" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="png" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="gif" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="tiff" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="jpg" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="jpeg" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
            <action ext="pdf" name="view_comment" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Math documents -->
        <!-- In fact Math documents are not supported at all.
             See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
        <app name="math">
            <action name="view" default="true" ext="sxm"/>
            <action name="edit" default="true" ext="odf"/>
        </app>
        -->

        <!-- Legacy MIME-type actions (compatibility) -->

        <app name="image/svg+xml">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Writer documents -->
        <app name="application/vnd.sun.xml.writer">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Calc documents -->
        <app name="application/vnd.sun.xml.calc">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Impress documents -->
        <app name="application/vnd.sun.xml.impress">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Draw documents -->
        <app name="application/vnd.sun.xml.draw">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics-flat-xml">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Chart documents -->
        <app name="application/vnd.oasis.opendocument.chart">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Text master documents -->
        <app name="application/vnd.sun.xml.writer.global">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-master">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Math documents -->
        <!-- In fact Math documents are not supported at all.
             See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
        <app name="application/vnd.sun.xml.math">
            <action name="view" default="true" ext=""/>
        </app>
        <app name="application/vnd.oasis.opendocument.formula">
            <action name="edit" default="true" ext=""/>
        </app>
        -->
        <!-- Text template documents -->
        <app name="application/vnd.sun.xml.writer.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Writer master document templates -->
        <app name="application/vnd.oasis.opendocument.text-master-template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Spreadsheet template documents -->
        <app name="application/vnd.sun.xml.calc.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.spreadsheet-template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Presentation template documents -->
        <app name="application/vnd.sun.xml.impress.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.presentation-template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Drawing template documents -->
        <app name="application/vnd.sun.xml.draw.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.graphics-template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- MS Word -->
        <app name="application/msword">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/msword">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- MS Excel -->
        <app name="application/vnd.ms-excel">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- MS PowerPoint -->
        <app name="application/vnd.ms-powerpoint">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- OOXML wordprocessing -->
        <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.document">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-word.document.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-word.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- OOXML spreadsheet -->
        <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.sheet.binary.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-excel.sheet.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- OOXML presentation -->
        <app name="application/vnd.openxmlformats-officedocument.presentationml.presentation">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint.presentation.macroEnabled.12">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.presentationml.template">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-powerpoint.template.macroEnabled.12">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- Others -->
        <app name="application/vnd.wordperfect">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-aportisdoc">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-hwp">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-works">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-mswrite">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-dif-document">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="text/spreadsheet">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="text/csv">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-dbase">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.lotus-1-2-3">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/cgm">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/vnd.dxf">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/x-emf">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/x-wmf">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/coreldraw">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.visio2013">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.visio">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.ms-visio.drawing">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-mspublisher">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-sony-bbeb">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-gnumeric">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/macwriteii">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-iwork-numbers-sffnumbers">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.oasis.opendocument.text-web">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-pagemaker">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="text/rtf">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="text/plain">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-fictionbook+xml">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/clarisworks">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/x-wpg">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-iwork-pages-sffpages">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.openxmlformats-officedocument.presentationml.slideshow">
            <action default="true" ext="" name="edit" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-iwork-keynote-sffkey">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-abiword">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/x-freehand">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/vnd.sun.xml.chart">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/x-t602">
            <action default="true" ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/bmp">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/png">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/gif">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/tiff">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/jpg">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="image/jpeg">
            <action ext="" name="view" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>
        <app name="application/pdf">
            <action ext="" name="view_comment" urlsrc="https://mynextcloud.domain/browser/6ba7057/cool.html?"/>
        </app>

        <!-- End of legacy MIME-type actions -->

        <app name="Capabilities">
            <action ext="" name="getinfo" urlsrc="https://mynextcloud.domain/hosting/capabilities"/>
        </app>
    </net-zone>
<proof-key exponent="AQAB" modulus="lwCbaBoh8qA/f/JrDSXz5uBKdGsdrLMxfjCiLFv4CFJQM6RjHS9eB1Dt3ROk68x2vHoCDXpWEIt+903KE5zQ3FreRHhUvIB5MvW7QZAQCKqInpDILqLKvqwF/wS2yP193tz96zsWvym/1NSKFtqfAyZilAYPuLi/wKWtI1Y0IQmfIi4r0jwoO0pR0j40f4NYhLxAAoU1YehtG4Ch6XAFDv06z0FEEsLFkKRbO1RCYEAp3tGHFWee3jJ4jbQPu1Y5q4Hh+HWfIp0Nlr9WmPMkZpHrwThJjtGfugwODVnRL6xGPy43PaXXDHxZwzT9JBmjaSo9u7yEBw0VQ6E0aEE95Q==" oldexponent="AQAB" oldmodulus="lwCbaBoh8qA/f/JrDSXz5uBKdGsdrLMxfjCiLFv4CFJQM6RjHS9eB1Dt3ROk68x2vHoCDXpWEIt+903KE5zQ3FreRHhUvIB5MvW7QZAQCKqInpDILqLKvqwF/wS2yP193tz96zsWvym/1NSKFtqfAyZilAYPuLi/wKWtI1Y0IQmfIi4r0jwoO0pR0j40f4NYhLxAAoU1YehtG4Ch6XAFDv06z0FEEsLFkKRbO1RCYEAp3tGHFWee3jJ4jbQPu1Y5q4Hh+HWfIp0Nlr9WmPMkZpHrwThJjtGfugwODVnRL6xGPy43PaXXDHxZwzT9JBmjaSo9u7yEBw0VQ6E0aEE95Q==" oldvalue="BgIAAACkAABSU0ExAAgAAAEAAQDlPUFoNKFDFQ0HhLy7PSppoxkk/TTDWXwM16U9Ny4/Rqwv0VkNDgy6n9GOSTjB65FmJPOYVr+WDZ0in3X44YGrOVa7D7SNeDLenmcVh9HeKUBgQlQ7W6SQxcISREHPOv0OBXDpoYAbbehhNYUCQLyEWIN/ND7SUUo7KDzSKy4inwkhNFYjraXAv7i4DwaUYiYDn9oWitTUvym/Fjvr/dzeff3ItgT/Bay+yqIuyJCeiKoIEJBBu/UyeYC8VHhE3lrc0JwTyk33fosQVnoNAnq8dszrpBPd7VAHXi8dY6QzUFII+FssojB+MbOsHWt0SuDm8yUNa/J/P6DyIRpomwCX" value="BgIAAACkAABSU0ExAAgAAAEAAQDlPUFoNKFDFQ0HhLy7PSppoxkk/TTDWXwM16U9Ny4/Rqwv0VkNDgy6n9GOSTjB65FmJPOYVr+WDZ0in3X44YGrOVa7D7SNeDLenmcVh9HeKUBgQlQ7W6SQxcISREHPOv0OBXDpoYAbbehhNYUCQLyEWIN/ND7SUUo7KDzSKy4inwkhNFYjraXAv7i4DwaUYiYDn9oWitTUvym/Fjvr/dzeff3ItgT/Bay+yqIuyJCeiKoIEJBBu/UyeYC8VHhE3lrc0JwTyk33fosQVnoNAnq8dszrpBPd7VAHXi8dY6QzUFII+FssojB+MbOsHWt0SuDm8yUNa/J/P6DyIRpomwCX"/></wopi-discovery>* Connection #0 to host mynextcloud.domain left intact

UPD: I used nginx conf from documentation and it's work.

0 replies

woiwoiwoiwoi · 2023-06-06T21:53:55Z

woiwoiwoiwoi
Jun 6, 2023

I followed the instructions and they (temporarily) solved my problem. The IP that was logged was the public IP of my router. So the next time my ISP assigns a new IP to me, I will have to redo this and not forget to delete the old IP. I'm sure this is not intended and I could imagine this is caused by some misconfiguration of my setup. Where could I start looking?

Maybe it's related to my reverse proxy? I'm using Nginx Proxy Manager and network_mode is set to bridge not host, if that's relevant.

0 replies

pommares · 2023-06-07T12:27:27Z

pommares
Jun 7, 2023

Hello, I have this error in my collabora container:
wsd-00001-00025 2023-06-07 11:43:22.033262 +0000 [ remotefontconfig_poll ] ERR Remote config server has response status code: 0| wsd/COOLWSD.cpp:1176
wsd-00001-00025 2023-06-07 11:49:23.481006 +0000 [ remotefontconfig_poll ] ERR #31: Error while handling poll at 0 in HttpSynReqPoll: #31 (handshake): socket closed unexpectedly. BIO error: 0, rc: -1: error:00000000:lib(0):func(0):reason(0):| net/Socket.cpp:464
I can't open a document on my nextcloud. How can I correct this error?

0 replies

Slarag · 2023-07-02T15:02:25Z

Slarag
Jul 2, 2023

I have the same problem from time to time that I can't edit documents with Collabora.
The method described above (enter the IP address from the log message to the WOPI allow list) solves my problem each time.

I'm using DynDNS. My IP address changes frequently.
I'm running my nextcloud AIO behind a Caddy reverse proxy on a sub-domain.

The IP shown in the log message is my current public IP address, so I guess I will always run into the same problem again whenever my public IP address changes. This is unfortunate and I guess also a security issue when I just keep adding a new IP address every few days.

Can I somehow tell Nextloud/Collabora to automatically update that list with my current public IP and remove the old one? Or is there some other workaround for this?

5 replies

Slarag Jul 7, 2023

I have just made the following workaround: a cronjob is checking my IP every minute and updates the dyndns record if it has changed. This script was provided by my DNS provider. I have now added the following line where the DNS entry gets updated:

# Flush DNS cache
/usr/bin/resolvectl flush-caches

# Update WOPI allow list
/usr/bin/docker exec --user www-data nextcloud-aio-nextcloud php occ config:app:set richdocuments wopi_allowlist --value "127.0.0.1/8,192.168.0.0/16,172.16.0.0/12,10.0.0.0/8,fd00::/8,::1,${aIPv4},${aIPv6}"

This way, the WOPI allowlist is set to my new pulbic IPv4/6 addresses each time my DynDNS record gets updated. Any opinions on that workaround?

Slarag Jul 20, 2023

Updated the code sample above: Added flushing of DNS cache, removed -it flag, add private IP ranges.

szaimen Jul 20, 2023
Maintainer Author

You could alternatively use the built-in backup solution and enable daily backups which will restart the containers at a certain time and should update the public ip-address automatically.

Slarag Jul 20, 2023

@szaimen So, you're saying the WOPI allow list gets updated automatically on container startup? I'm using my own backup solution, but i also restarts all my containers.

The problem I see with this solution is that this would require the backup process (automatic or own solution) to run shortly after my ISP has assigned new IP adresses. E.g. if the backup restarts my containers and my IP adress changes on hour or so later, I would still end up with an old/invalid IP address in the WOPI allow list.

szaimen Jul 20, 2023
Maintainer Author

@szaimen So, you're saying the WOPI allow list gets updated automatically on container startup?

yes it should

The problem I see with this solution is that this would require the backup process (automatic or own solution) to run shortly after my ISP has assigned new IP adresses.

Yes, that would need to run after the ip-address is updated, indeed.

E.g. if the backup restarts my containers and my IP adress changes on hour or so later, I would still end up with an old/invalid IP address in the WOPI allow list.

I dont see any way to fix that except clearing the allowed ip-addresses sometimes manually. However the best approach would honestly be this: CollaboraOnline/online#5076. Afterwards the wopi-allowlist would not be needed anmore.

LastKnight1881 · 2023-09-07T19:24:09Z

LastKnight1881
Sep 7, 2023

@szaimen Hi, when I do curl -vvv https://$NC_DOMAIN:443/hosting/discovery, I get the message, "Failed to connect to mydomain.com port 443..." but, Nextcloud is working fine, portchecker.io says the port is open, and I can ping the server by domain name from inside the container.

6 replies

LastKnight1881 Sep 9, 2023

Thanks for pointing me in the right direction. I was able to fix it by adding the local internal IP address of the server to the host file.

ShapeShifter499 Oct 19, 2023

@LastKnight1881 This worked for me but I'm not entirely 100% sure why.

/etc/hosts
192.168.1.20 cloud.mydomain.com

Is it because of NAT?

LastKnight1881 Oct 19, 2023

@ShapeShifter499 I'm not certain. But, I removed it from my host file and added a DNS entry to my firewall instead. Most people probably already have an entry already. I bet that is why it doesn't come up often.

ShapeShifter499 Oct 21, 2023

@LastKnight1881 I figured my issue out. My router running OpenWRT had a badly configured firewall. I was adding extra entries I thought was for "NAT Loopback" in the web interface. Turns out there is a setting in the "port forwards" that does this for you and I just misunderstood.

https://en.wikipedia.org/wiki/Network_address_translation#Nat_hairpinning When the server and the requesting device are in the same network the router should be able to detect that and bounce the packet back instead of going over the WAN.

If things are correctly setup for "NAT loopback" (also known as hairpinning), then you shouldn't need to add a DNS entry. Unless you are not exposing your Nextcloud setup to the internet.

ShapeShifter499 Oct 21, 2023

I should add that this applies only to IPv4

aolson28 · 2023-09-19T00:55:55Z

aolson28
Sep 19, 2023

Having Collabora issues (I'm newer to this, sorry if my formatting is strange or my explanations are strange)

I'm having intermittent Office issues where my documents won't load for editing (mostly won't work but occasionally it decides to be kind).

curl result:
`curl -vvv https://mydomain.com/hosting/discovery

Trying <m.y.i.p>...
Connected to mydomain.com (m.y.i.p) port 443 (#0)
ALPN: offers h2,http/1.1
TLSv1.3 (OUT), TLS handshake, Client hello (1):
CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
TLSv1.3 (IN), TLS handshake, Server hello (2):
TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
TLSv1.3 (IN), TLS handshake, Certificate (11):
TLSv1.3 (IN), TLS handshake, CERT verify (15):
TLSv1.3 (IN), TLS handshake, Finished (20):
TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.3 (OUT), TLS handshake, Finished (20):
SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256
ALPN: server accepted h2
Server certificate:
subject: CN=mydomain.com
start date: Sep 15 02:17:58 2023 GMT
expire date: Dec 14 02:17:57 2023 GMT
subjectAltName: host "mydomain.com" matched cert's "mydomain.com"
issuer: C=US; O=Let's Encrypt; CN=R3
SSL certificate verify ok.
using HTTP/2
h2h3 [:method: GET]
h2h3 [:path: /hosting/discovery]
h2h3 [:scheme: https]
h2h3 [:authority: mydomain.com]
h2h3 [user-agent: curl/7.88.1]
h2h3 [accept: /]
Using Stream ID: 1 (easy handle 0x55af30a1cc70)

GET /hosting/discovery HTTP/2
Host: mydomain.com
user-agent: curl/7.88.1
accept: /

TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/2 200
< alt-svc: h3=":443"; ma=2592000
< content-type: text/xml
< date: Tue, 19 Sep 2023 00:46:08
< last-modified: Tue, 19 Sep 2023 00:46:08
< server: Caddy
< server: COOLWSD HTTP Server 23.05.3.1
< x-content-type-options: nosniff
< content-length: 32948
<

    <!-- Writer documents -->
    <app favIconUrl="https://mydomain.com/browser/a719c0f/images/x-office-document.svg" name="writer">
        <action default="true" ext="sxw" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="odt" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="fodt" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Text template documents -->
        <action default="true" ext="stw" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="ott" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- MS Word -->
        <action default="true" ext="doc" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="dot" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- OOXML wordprocessing -->
        <action default="true" ext="docx" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="docm" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="dotx" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="dotm" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Others -->
        <action default="true" ext="wpd" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="pdb" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="hwp" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="wps" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="wri" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="lrf" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="mw" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="rtf" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="txt" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="fb2" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="cwk" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="pages" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="abw" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="602" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <app name="writer-global">
        <!-- Text master documents -->
        <action default="true" ext="sxg" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="odm" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Writer master document templates -->
        <action default="true" ext="otm" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <app name="writer-web">
        <action default="true" ext="oth" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Calc documents -->
    <app favIconUrl="https://mydomain.com/browser/a719c0f/images/x-office-spreadsheet.svg" name="calc">
        <action default="true" ext="sxc" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="ods" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="fods" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Spreadsheet template documents -->
        <action default="true" ext="stc" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="ots" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- MS Excel -->
        <action default="true" ext="xls" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="xla" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- OOXML spreadsheet -->
        <action default="true" ext="xltx" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="xltm" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="xlsx" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="xlsb" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="xlsm" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Others -->
        <action default="true" ext="dif" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="slk" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="csv" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="dbf" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="wk1" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="gnumeric" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="numbers" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Impress documents -->
    <app favIconUrl="https://mydomain.com/browser/a719c0f/images/x-office-presentation.svg" name="impress">
        <action default="true" ext="sxi" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="odp" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="fodp" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Presentation template documents -->
        <action default="true" ext="sti" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="otp" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- MS PowerPoint -->
        <action default="true" ext="ppt" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="pot" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- OOXML presentation -->
        <action default="true" ext="pptx" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="pptm" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="potx" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="potm" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="ppsx" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Others -->
        <action default="true" ext="cgm" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="key" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Draw documents -->
    <app name="draw">
        <action default="true" ext="sxd" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="odg" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="fodg" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Drawing template documents -->
        <action default="true" ext="std" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="otg" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <!-- Others -->
        <action ext="svg" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="dxf" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="emf" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="wmf" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="cdr" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="vsd" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="vsdx" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="vss" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="pub" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="p65" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="wpg" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action default="true" ext="fh" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="bmp" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="png" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="gif" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="tiff" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="jpg" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="jpeg" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
        <action ext="pdf" name="view_comment" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Math documents -->
    <!-- In fact Math documents are not supported at all.
         See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
    <app name="math">
        <action name="view" default="true" ext="sxm"/>
        <action name="edit" default="true" ext="odf"/>
    </app>
    -->

    <!-- Legacy MIME-type actions (compatibility) -->

    <app name="image/svg+xml">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-powerpoint">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-excel">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Writer documents -->
    <app name="application/vnd.sun.xml.writer">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.text">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.text-flat-xml">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Calc documents -->
    <app name="application/vnd.sun.xml.calc">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.spreadsheet">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.spreadsheet-flat-xml">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Impress documents -->
    <app name="application/vnd.sun.xml.impress">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.presentation">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.presentation-flat-xml">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Draw documents -->
    <app name="application/vnd.sun.xml.draw">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.graphics">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.graphics-flat-xml">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Chart documents -->
    <app name="application/vnd.oasis.opendocument.chart">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Text master documents -->
    <app name="application/vnd.sun.xml.writer.global">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.text-master">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Math documents -->
    <!-- In fact Math documents are not supported at all.
         See: https://bugs.documentfoundation.org/show_bug.cgi?id=97006
    <app name="application/vnd.sun.xml.math">
        <action name="view" default="true" ext=""/>
    </app>
    <app name="application/vnd.oasis.opendocument.formula">
        <action name="edit" default="true" ext=""/>
    </app>
    -->
    <!-- Text template documents -->
    <app name="application/vnd.sun.xml.writer.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.text-template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Writer master document templates -->
    <app name="application/vnd.oasis.opendocument.text-master-template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Spreadsheet template documents -->
    <app name="application/vnd.sun.xml.calc.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.spreadsheet-template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Presentation template documents -->
    <app name="application/vnd.sun.xml.impress.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.presentation-template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Drawing template documents -->
    <app name="application/vnd.sun.xml.draw.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.graphics-template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- MS Word -->
    <app name="application/msword">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/msword">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- MS Excel -->
    <app name="application/vnd.ms-excel">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- MS PowerPoint -->
    <app name="application/vnd.ms-powerpoint">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- OOXML wordprocessing -->
    <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.document">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-word.document.macroEnabled.12">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.openxmlformats-officedocument.wordprocessingml.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-word.template.macroEnabled.12">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- OOXML spreadsheet -->
    <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-excel.template.macroEnabled.12">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-excel.sheet.binary.macroEnabled.12">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-excel.sheet.macroEnabled.12">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- OOXML presentation -->
    <app name="application/vnd.openxmlformats-officedocument.presentationml.presentation">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-powerpoint.presentation.macroEnabled.12">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.openxmlformats-officedocument.presentationml.template">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-powerpoint.template.macroEnabled.12">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- Others -->
    <app name="application/vnd.wordperfect">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-aportisdoc">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-hwp">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-works">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-mswrite">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-dif-document">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="text/spreadsheet">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="text/csv">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-dbase">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.lotus-1-2-3">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/cgm">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/vnd.dxf">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/x-emf">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/x-wmf">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/coreldraw">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.visio2013">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.visio">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.ms-visio.drawing">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-mspublisher">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-sony-bbeb">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-gnumeric">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/macwriteii">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-iwork-numbers-sffnumbers">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.oasis.opendocument.text-web">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-pagemaker">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="text/rtf">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="text/plain">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-fictionbook+xml">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/clarisworks">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/x-wpg">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-iwork-pages-sffpages">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.openxmlformats-officedocument.presentationml.slideshow">
        <action default="true" ext="" name="edit" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-iwork-keynote-sffkey">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-abiword">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/x-freehand">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/vnd.sun.xml.chart">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/x-t602">
        <action default="true" ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/bmp">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/png">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/gif">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/tiff">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/jpg">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="image/jpeg">
        <action ext="" name="view" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>
    <app name="application/pdf">
        <action ext="" name="view_comment" urlsrc="https://mydomain.com/browser/a719c0f/cool.html?"/>
    </app>

    <!-- End of legacy MIME-type actions -->

    <app name="Capabilities">
        <action ext="" name="getinfo" urlsrc="https://mydomain.com/hosting/capabilities"/>
    </app>
</net-zone>

$ `

Excerpt from Collabora Logs:

2023-09-18 20:18:28 wsd-00007-00027 2023-09-18 20:18:28.539700 -0400 [ remotefontconfig_poll ] WRN #22: Timed out while requesting [GET mydomain.com/apps/richdocuments/settings/fonts.json] after 30014ms| net/HttpRequest.hpp:1496 2023-09-18 20:18:28 wsd-00007-00027 2023-09-18 20:18:28.540186 -0400 [ remotefontconfig_poll ] ERR Remote config server has response status code: 0 (Unknown)| wsd/COOLWSD.cpp:1188 2023-09-18 20:20:07 frk-00017-00017 2023-09-18 20:20:07.297199 -0400 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/hosts] is out-of-date. Will have to copy sysTemplate to jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:524 2023-09-18 20:20:10 frk-00017-00017 2023-09-18 20:20:10.763089 -0400 [ forkit ] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/hosts] is out-of-date. Will have to copy sysTemplate to jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:524 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.751677 -0400 [ docbroker_00a ] WRN #30: Timed out while requesting [GET mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=<token>&access_token_ttl=0] after 30011ms| net/HttpRequest.hpp:1496 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.752124 -0400 [ docbroker_00a ] ERR WOPI::GetFile [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=&access_token_ttl=0] failed with Status Code: 0 (Unknown)| wsd/Storage.cpp:1156 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.752443 -0400 [ docbroker_00a ] ERR Cannot download document from WOPI storage uri [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=&access_token_ttl=0]. Error: WOPI::GetFile [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=&access_token_ttl=0] failed: | wsd/Storage.cpp:1095 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.752595 -0400 [ docbroker_00a ] ERR loading document exception: WOPI::GetFile [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=&access_token_ttl=0] failed: | wsd/DocumentBroker.cpp:2610 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.752749 -0400 [ docbroker_00a ] ERR Failed to add session to [https%3A%2F%2Fmydomain.com%3A443%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F37916_instanceid] with URI [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid?access_token=<token>&access_token_ttl=0]: WOPI::GetFile [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=&access_token_ttl=0] failed: | wsd/DocumentBroker.cpp:2572 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.753814 -0400 [ docbroker_00a ] ERR Storage error while starting session on https%3A%2F%2Fmydomain.com%3A443%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F37916_instanceid for socket #18. Terminating connection. Error: WOPI::GetFile [https://mydomain.com/index.php/apps/richdocuments/wopi/files/37916_instanceid/contents?access_token=&access_token_ttl=0] failed: | wsd/COOLWSD.cpp:5052 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.754266 -0400 [ docbroker_00a ] ERR #18: Socket write returned -1 (EPIPE: Broken pipe)| net/Socket.hpp:1428 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.790958 -0400 [ docbroker_00a ] ERR #28: Read failed, have 0 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1122 2023-09-18 20:20:37 wsd-00007-05254 2023-09-18 20:20:37.791135 -0400 [ docbroker_00a ] WRN #28: Unassociated Kit (665) disconnected unexpectedly| wsd/COOLWSD.cpp:3491 2023-09-18 20:20:38 sh: 1: /usr/bin/coolmount: Operation not permitted

Thanks for the help in advance!

0 replies

kommtzeitkonrad · 2023-09-21T08:36:32Z

kommtzeitkonrad
Sep 21, 2023

A general step on Linux would first be to check if e.g. 127.0.0.1 yourdomain.com or e.g. 127.0.1.1 yourdomain.com was added to the /etc/hosts file on your host runnig the docker daemon. If that is the case, Remove it from the file and restart AIO which might already make things work.

This was indeed the case, but removing it did not solve the connectivity issues I had with Collabora.

Collabora (Nextcloud Office)

First, visit https://yourdomain.com/settings/admin/richdocuments and if you see the Allow list for WOPI requests input field (If you dont see the field, just skip this step), add ,0.0.0.0/0 to it. This might already resolve you connection issue. However it is not secure as you allow all ip-addresses to connect by doing so.

If this makes it work, you will next need to find out the ip-address that is needed here and put it additionally into the wopi-allowlist instead of 0.0.0.0/0. One way to find the correct one out is to remove the 0.0.0.0/0 from the list again, setting the loglevel to 1 with sudo docker exec --user www-data -it nextcloud-aio-nextcloud php occ config:system:set loglevel --value=1 and try to open a collabora document. Then it should log the ip-address that was used in https://yourdomain.com/settings/admin/logging and you can simply add this ip-address to the wopi-allowlist instead of 0.0.0.0/0. Now you can reset the loglevel with sudo docker exec --user www-data -it nextcloud-aio-nextcloud php occ config:system:set loglevel --value=2

Following this instruction then solved the problem.
Since I set up IPv6 for Nextcloud AIO (as described here https://github.com/nextcloud/all-in-one/blob/main/docker-ipv6-support.md) all containers also have an IPv6 address. The logs then revealed the IPv6 address of the nextcloud-aio-collabora container, that was not on the WOPI allow list. I added the whole IPv6 subnet to the WOPI allow list and everything works fine.

0 replies

alexonpeace · 2023-10-12T21:03:14Z

alexonpeace
Oct 12, 2023

Talk issue

28d3cafbf2b1:/var/www/html# curl -vvv https://$NC_DOMAIN:443/standalone-signaling/api/v1/welcome
* processing: https://sub.domain.tld:443/standalone-signaling/api/v1/welcome
*   Trying xx.xx.xx.xx:443...
* Connected to sub.domain.tld (xx.xx.xx.xx) port 443
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: self-signed certificate
* Closing connection
curl: (60) SSL certificate problem: self-signed certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Log

client.go:284: Client from xx.xx.xx.xx has RTT of 6 ms (6.494984ms)
capabilities.go:151: Capabilities expired for https:///sub.domain.tld/ocs/v2.php/cloud/capabilities, updating
capabilities.go:248: Could not get capabilities for https:///sub.domain.tld/ocs/v2.php/apps/spreed/api/v3/signaling/backend: Get "https:///sub.domain.tld/ocs/v2.php/cloud/capabilities": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2023-10-13T02:17:38+05:30 is after 2016-04-06T00:02:54Z```

I don't understand why it would say it's selfsigned since I use NPM and everything else works flawlessly

2 replies

szaimen Oct 13, 2023
Maintainer Author

Maybe wrong timezone setting?

alexonpeace Oct 19, 2023

Turns out it had to do with NAT hairpinning, fixed it in firewall

zybersup · 2023-10-19T05:54:59Z

zybersup
Oct 19, 2023

After latest upgrading a few days ago, I got the problem with Collabora, and docker said Talk and Apache are 'unhealty', and all the containers cannot access the host server from theirs command line. Try resolving DN with successful to all DN in the world except 2 DNs of my router and my nextcloud (same IP address).

The basic functions of nextcloud (Files, Folders, and even Deck app) are running properly. Only the Collabora (Nextcloud Office) server is unable to connect. I have not tried Talk yet, but last week it worked fine (when Collabora also worked fine).

They all works for a year. But after the latest update (by nightly automatic restart), I cannot open office documents anymore.

My AIO instance is behind reverse proxy. I have migrated from one machine (Windows 10) to the new machine (Ubuntu 22.04) last month. Everything works find until a few days ago that I find Collabora does not work. I have just started searching the internet and find that it could be about the DN resolution in containers.

The host machine is behind router with DDNS. I configure virtual server in the router to map port 443 to the machine.

I tried 'curl -vvv https://my-domain-normally-used/' inside the mastercontainer, nextcloud, collabora, talk, and apache containers and got the same result; "curl: (6) Could not resolve host: my-domain-normally-used". I tried other normal DN such as google, bing, nextcloud and our other server names hosted on public internet. They all work.

I tried the instructions at #2065, but after restart the mastercontainer, the network "nextcloud-aio" is back. All containers are still unable to resolve the main server domain name, while the other domain names are resolvable.

I tried curl and dig, in containers and in the host command line.

Dig is always fine in both containers and host.
Curl on host works with all domain names.
Curl on containers works for other domain names except the domain name of router and nextcloud (different names, same IP address).

How to debug problems with Collabora and/or Talk #1358

szaimen Nov 4, 2022 Maintainer

Collabora (Nextcloud Office)

Nextcloud Talk

Replies: 30 comments · 82 replies

This comment has been hidden.

szaimen Jan 9, 2023 Maintainer Author

szaimen Jan 9, 2023 Maintainer Author

szaimen Jan 9, 2023 Maintainer Author

szaimen Jan 10, 2023 Maintainer Author

This comment has been hidden.

This comment has been hidden.

This comment has been hidden.

This comment has been hidden.

This comment has been hidden.

szaimen Jan 11, 2023 Maintainer Author

szaimen Jan 12, 2023 Maintainer Author

szaimen Jan 13, 2023 Maintainer Author

szaimen Jan 13, 2023 Maintainer Author

szaimen Jan 20, 2023 Maintainer Author

szaimen Jan 21, 2023 Maintainer Author

szaimen Feb 1, 2023 Maintainer Author

szaimen Feb 1, 2023 Maintainer Author

szaimen Feb 1, 2023 Maintainer Author

szaimen Feb 20, 2023 Maintainer Author

szaimen Feb 21, 2023 Maintainer Author

szaimen Mar 4, 2023 Maintainer Author

szaimen Mar 4, 2023 Maintainer Author

szaimen Mar 4, 2023 Maintainer Author

szaimen Mar 9, 2023 Maintainer Author

szaimen Mar 10, 2023 Maintainer Author

szaimen
Nov 4, 2022
Maintainer

Replies: 30 comments 82 replies

szaimen Jan 9, 2023
Maintainer Author

szaimen Jan 9, 2023
Maintainer Author

szaimen Jan 9, 2023
Maintainer Author

szaimen Jan 10, 2023
Maintainer Author

szaimen Jan 11, 2023
Maintainer Author

szaimen
Jan 12, 2023
Maintainer Author

szaimen Jan 13, 2023
Maintainer Author

szaimen Jan 13, 2023
Maintainer Author

szaimen Jan 20, 2023
Maintainer Author

szaimen Jan 21, 2023
Maintainer Author

szaimen Feb 1, 2023
Maintainer Author

szaimen Feb 1, 2023
Maintainer Author

szaimen Feb 1, 2023
Maintainer Author

szaimen Feb 20, 2023
Maintainer Author

szaimen Feb 21, 2023
Maintainer Author

szaimen Mar 4, 2023
Maintainer Author

szaimen Mar 4, 2023
Maintainer Author

szaimen Mar 4, 2023
Maintainer Author

szaimen Mar 9, 2023
Maintainer Author

szaimen Mar 10, 2023
Maintainer Author