From 395413694a898fe40c919d341289530078009aa1 Mon Sep 17 00:00:00 2001
From: Kyattsukuro <nikl.free44@gmail.com>
Date: Thu, 22 Jan 2026 23:21:57 +0100
Subject: [PATCH] added collabora websocket middelware

---
 compose.yml | 42 ++++++++++++++++++++++++++++++++++++------
 1 file changed, 36 insertions(+), 6 deletions(-)

diff --git a/compose.yml b/compose.yml
index a53be0f..a5b4b2c 100644
--- a/compose.yml
+++ b/compose.yml
@@ -39,31 +39,61 @@ services:
       traefik.http.routers.nextcloud.tls: true
       traefik.http.routers.nextcloud.tls.certResolver: hetzner
       traefik.http.services.nextcloud-https.loadbalancer.server.port: 80
+      traefik.http.services.nextcloud-https.loadbalancer.passHostHeader: true
 
-      traefik.http.routers.nextcloud.middlewares: nextcloud_redirectregex, nextcloud-header
-      traefik.http.middlewares.nextcloud_redirectregex.redirectregex.permanent: "true"
-      traefik.http.middlewares.nextcloud_redirectregex.redirectregex.regex: "https://(.*)/.well-known/(?:card|cal)dav"
-      traefik.http.middlewares.nextcloud_redirectregex.redirectregex.replacement: "https://$${1}/remote.php/dav"
+      traefik.http.routers.nextcloud.middlewares: nextcloud-dav,nextcloud-header
+      traefik.http.middlewares.nextcloud-dav.redirectRegex.regex: https://(.*)/.well-known/(card|cal)dav
+      traefik.http.middlewares.nextcloud-dav.redirectRegex.replacement: https://$${1}/remote.php/dav/
+      traefik.http.middlewares.nextcloud-dav.redirectRegex.permanent: true
       traefik.http.middlewares.nextcloud-header.headers.stsSeconds: "15552000"
+      # traefik.http.middlewares.nextcloud-header.headers.referrerPolicy: no-referrer
+      # traefik.http.middlewares.nextcloud-header.headers.forceSTSHeader: true
+      # traefik.http.middlewares.nextcloud-header.headers.stsPreload: true
+      # traefik.http.middlewares.nextcloud-header.headers.stsIncludeSubdomains: true
+      # traefik.http.middlewares.nextcloud-header.headers.browserXssFilter: true
+      # traefik.http.middlewares.nextcloud-header.headers.customRequestHeaders.X-Forwarded-Proto: https
   collabora:
     image: collabora/code:25.04.6.1.1
     hostname: collabora
     networks:
       - proxy
     environment:
-      - domain=nextcloud\\.urmel\\.de
+      - aliasgroup1=https://nextcloud.urmel.de
+      - DONT_GEN_SSL_CERT=YES
+      - domain=collabora.urmel.de
+      - VIRTUAL_HOST=collabora.urmel.de
       - username=someAdmin
       - password=${COLLABORA_PASSWORD}
-      - extra_params=--o:ssl.enable=false --o:ssl.termination=true
+      - extra_params=--o:ssl.enable=false --o:ssl.termination=true --o:net.wopi.host=nextcloud.urmel.de
     cap_add:
       - MKNOD
+    entrypoint: ['/bin/bash', '-c']
+    command: ['coolconfig generate-proof-key && /start-collabora-online.sh']
+    healthcheck:
+      test: [ "CMD", "curl", "-f", "http://localhost:9980/hosting/discovery" ]
+      interval: 15s
+      timeout: 10s
+      retries: 5
     labels:
       traefik.enable: true
       traefik.http.routers.collabora.rule: "Host(`collabora.urmel.de`)"
       traefik.http.routers.collabora.tls: true
       traefik.http.routers.collabora.tls.certResolver: hetzner
       traefik.http.services.collabora-https.loadbalancer.server.port: 9980
+      traefik.http.services.collabora-https.loadbalancer.passHostHeader: true
 
+      # traefik.http.middlewares.collabora-headers.headers.customrequestheaders.Connection: Upgrade
+      # traefik.http.middlewares.collabora-headers.headers.customrequestheaders.Upgrade: websocket
+      # traefik.http.middlewares.collabora-headers.headers.customrequestheaders.X-Forwarded-Proto: https
+      # traefik.http.middlewares.collabora-headers.headers.customrequestheaders.X-Forwarded-Host: collabora.urmel.de
+      # traefik.http.middlewares.collabora-headers.headers.referrerPolicy: no-referrer
+      # traefik.http.middlewares.collabora-headers.headers.stsSeconds: 15552000
+      # traefik.http.middlewares.collabora-headers.headers.forceSTSHeader: true
+      # traefik.http.middlewares.collabora-headers.headers.stsPreload: true
+      # traefik.http.middlewares.collabora-headers.headers.stsIncludeSubdomains: true
+      # traefik.http.middlewares.collabora-headers.headers.browserXssFilter: true
+      # traefik.http.middlewares.collabora-headers.headers.customRequestHeaders.X-Forwarded-Proto: https
+      # traefik.http.routers.collabora.middlewares: collabora-headers
   drawio:
     image: jgraph/drawio:28.2.5
     hostname: drawio