Urmel-Ansible-Roles/nextcloud
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added collabora websocket middelware

Browse Source
This commit is contained in:
Kyattsukuro 2026-01-22 23:21:57 +01:00
parent 62546dc829
commit 395413694a
1 changed files with 36 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
compose.yml
View File

@ -39,31 +39,61 @@ services:
traefik.http.routers.nextcloud.tls: true
traefik.http.routers.nextcloud.tls.certResolver: hetzner
traefik.http.services.nextcloud-https.loadbalancer.server.port: 80
traefik.http.services.nextcloud-https.loadbalancer.passHostHeader: true
traefik.http.routers.nextcloud.middlewares: nextcloud_redirectregex, nextcloud-header
traefik.http.middlewares.nextcloud_redirectregex.redirectregex.permanent: "true"
traefik.http.middlewares.nextcloud_redirectregex.redirectregex.regex: "https://(.*)/.well-known/(?:card|cal)dav"
traefik.http.middlewares.nextcloud_redirectregex.redirectregex.replacement: "https://$${1}/remote.php/dav"
traefik.http.routers.nextcloud.middlewares: nextcloud-dav,nextcloud-header
traefik.http.middlewares.nextcloud-dav.redirectRegex.regex: https://(.*)/.well-known/(card|cal)dav
traefik.http.middlewares.nextcloud-dav.redirectRegex.replacement: https://$${1}/remote.php/dav/
traefik.http.middlewares.nextcloud-dav.redirectRegex.permanent: true
traefik.http.middlewares.nextcloud-header.headers.stsSeconds: "15552000"
# traefik.http.middlewares.nextcloud-header.headers.referrerPolicy: no-referrer
# traefik.http.middlewares.nextcloud-header.headers.forceSTSHeader: true
# traefik.http.middlewares.nextcloud-header.headers.stsPreload: true
# traefik.http.middlewares.nextcloud-header.headers.stsIncludeSubdomains: true
# traefik.http.middlewares.nextcloud-header.headers.browserXssFilter: true
# traefik.http.middlewares.nextcloud-header.headers.customRequestHeaders.X-Forwarded-Proto: https
collabora:
image: collabora/code:25.04.6.1.1
hostname: collabora
networks:
- proxy
environment:
- domain=nextcloud\\.urmel\\.de
- aliasgroup1=https://nextcloud.urmel.de
- DONT_GEN_SSL_CERT=YES
- domain=collabora.urmel.de
- VIRTUAL_HOST=collabora.urmel.de
- username=someAdmin
- password=${COLLABORA_PASSWORD}
- extra_params=--o:ssl.enable=false --o:ssl.termination=true
- extra_params=--o:ssl.enable=false --o:ssl.termination=true --o:net.wopi.host=nextcloud.urmel.de
cap_add:
- MKNOD
entrypoint: ['/bin/bash', '-c']
command: ['coolconfig generate-proof-key && /start-collabora-online.sh']
healthcheck:
test: [ "CMD", "curl", "-f", "http://localhost:9980/hosting/discovery" ]
interval: 15s
timeout: 10s
retries: 5
labels:
traefik.enable: true
traefik.http.routers.collabora.rule: "Host(`collabora.urmel.de`)"
traefik.http.routers.collabora.tls: true
traefik.http.routers.collabora.tls.certResolver: hetzner
traefik.http.services.collabora-https.loadbalancer.server.port: 9980
traefik.http.services.collabora-https.loadbalancer.passHostHeader: true
# traefik.http.middlewares.collabora-headers.headers.customrequestheaders.Connection: Upgrade
# traefik.http.middlewares.collabora-headers.headers.customrequestheaders.Upgrade: websocket
# traefik.http.middlewares.collabora-headers.headers.customrequestheaders.X-Forwarded-Proto: https
# traefik.http.middlewares.collabora-headers.headers.customrequestheaders.X-Forwarded-Host: collabora.urmel.de
# traefik.http.middlewares.collabora-headers.headers.referrerPolicy: no-referrer
# traefik.http.middlewares.collabora-headers.headers.stsSeconds: 15552000
# traefik.http.middlewares.collabora-headers.headers.forceSTSHeader: true
# traefik.http.middlewares.collabora-headers.headers.stsPreload: true
# traefik.http.middlewares.collabora-headers.headers.stsIncludeSubdomains: true
# traefik.http.middlewares.collabora-headers.headers.browserXssFilter: true
# traefik.http.middlewares.collabora-headers.headers.customRequestHeaders.X-Forwarded-Proto: https
# traefik.http.routers.collabora.middlewares: collabora-headers
drawio:
image: jgraph/drawio:28.2.5
hostname: drawio