collabora->onlyoffice

hosts/nas/apps.nix

@@ -12,12 +12,13 @@
     ../../modules
 
     ./apps/netdata
+    ./apps/collabora
   ];
 
   nas-apps = {
 
     collabora = {
-      enable = true;
+      enable = false;
       environmentFiles = [ config.sops.secrets."jallen-nas/collabora".path ];
     };
 

hosts/nas/apps/collabora/default.nix

@@ -1,7 +1,26 @@
-{ ... }:
+{ config, ... }:
 {
-  services.collabora-online = {
-    enable = true;
-    port = 9980;
-  };
+  virtualisation.oci-containers.containers.onlyoffice =  {
+      image = "onlyoffice/documentserver:latest";
+      ports = ["9980:80"];
+      environment = {
+        USE_UNAUTHORIZED_STORAGE = "true";
+      };
+
+      environmentFiles = [
+        config.sops.secrets."jallen-nas/onlyoffice-key".path
+      ];
+    };
+  # services.collabora-online = {
+  #   enable = false;
+  #   port = 9980;
+  # };
+
+  # services.onlyoffice = {
+  #   enable = true;
+  #   port = 9980;
+  #   hostname = "office.mjallen.dev";
+  # };
+  # users.users.onlyoffice.isSystemUser = true;
+  # users.users.onlyoffice.isNormalUser = false;
 }

hosts/nas/apps/nextcloud/default.nix

@@ -32,11 +32,11 @@ in
         mountPoint = "/var/lib/nextcloud";
       };
 
-      "/var/lib/onlyoffice" = {
-        hostPath = "/media/nas/ssd/nix-app-data/onlyoffice";
-        isReadOnly = false;
-        mountPoint = "/var/lib/onlyoffice";
-      };
+      # "/var/lib/onlyoffice" = {
+      #   hostPath = "/media/nas/ssd/nix-app-data/onlyoffice";
+      #   isReadOnly = false;
+      #   mountPoint = "/var/lib/onlyoffice";
+      # };
     };
 
     config =
@@ -110,18 +110,12 @@ in
               };
             };
           };
-
-          onlyoffice = {
-            enable = true;
-            port = 8000;
-            hostname = "office.mjallen.dev";
-          };
         };
 
         # System packages
         environment.systemPackages = with pkgs; [
           nextcloud30
-          onlyoffice-documentserver
+          # onlyoffice-documentserver
           sqlite
         ];
 
@@ -132,9 +126,9 @@ in
           group = "nextcloud";
         };
 
-        users.users.onlyoffice = {
-          group = lib.mkForce "nextcloud";
-        };
+        # users.users.onlyoffice = {
+        #   group = lib.mkForce "nextcloud";
+        # };
 
         users.groups = {
           nextcloud = {

hosts/nas/apps/traefik/default.nix

@@ -107,6 +107,11 @@ in
               ];
             };
           };
+          onlyoffice-websocket = {
+            headers.customrequestheaders = {
+              X-Forwarded-Proto = "https";
+            };
+          };
           # test-errors = {
           #   errors = {
           #     status = [
@@ -186,6 +191,7 @@ in
             entryPoints = [ "websecure" ];
             rule = "Host(`office.${domain}`)";
             service = "collabora";
+            middlewares = "onlyoffice-websocket";
             tls.certResolver = "letsencrypt";
           };
           cloud = {

hosts/nas/sops.nix

@@ -69,6 +69,10 @@
     restartUnits = [ "netdata.service" ];
   };
 
+  sops.secrets."jallen-nas/onlyoffice-key" = {
+    restartUnits = [ "podman-onlyoffice.service" ];
+  };
+
   sops.secrets."jallen-nas/paperless/secret" = {
     restartUnits = [ "container@paperless.service" ];
   };