Différences

Ci-dessous, les différences entre deux révisions de la page.

--- fr:collabora_online [2021/12/03 18:19] – modification externe 127.0.0.1
+++ fr:collabora_online [2023/05/29 17:16] (Version actuelle) – [nginx] Deed
@@ Ligne 7: / Ligne 7: @@
 <code bash>
 sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0C54D189F4BA284D
-sudo echo 'deb https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-debian10 ./' >> /etc/apt/sources.list
+sudo echo 'deb http://www.collaboraoffice.com/repos/CollaboraOnline/CODE-debian11 ./' >> /etc/apt/sources.list
 sudo apt update
-sudo apt install loolwsd code-brand
+sudo apt install coolwsd code-brand
 </code>
@@ Ligne 22: / Ligne 22: @@
 <code bash>
-sudo nano /etc/loolwsd/loolwsd.xml
+sudo nano /etc/coolwsd/coolwsd.xml
 </code>
 On change quelques paramètres.
+On utlise un proxy pour les Certificats :
+Dans coolwsd.xml, il faut changer:
+ssl.enable=false et ssl.termination=true
 Dans : <storage desc="Backend storage">
-<code>
+<code bash>
-desc="Regex pattern of hostname to allow or deny." allow="true">nextcloud\.example\.com</host>
+<storage desc="Backend storage">
-</code>
+                <filesystem allow="true"/>
+                <wopi allow="true" desc="Allow/deny wopi storage.">
+                        <max_file_size desc="Maximum document size in bytes to load. 0 for unlimited." type="uint">0</max_file_size>
+                        <locking desc="Locking settings">
+                                <refresh default="900" desc="How frequently we should re-acquire a lock with the storage server, in seconds (default 15 mins) or 0 for no refresh" type="int">900</refresh>
+                        </locking>
+                        <alias_groups desc="default mode is 'first' it allows only the first host when groups are not defined. set mode to 'groups' and define group to allow multiple host and its aliases" mode="groups">
+                                <!-- If you need to use multiple wopi hosts, please change the mode to "groups" and
+                    add the hosts below.  If one host is accessible under multiple ip addresses
+                    or names, add them as aliases. -->
+                                <group>
+                                        <host allow="true" desc="hostname to allow or deny.">https://soute.numenaute.org</host>
+                                        <alias desc="regex pattern of aliasname">https://cloud.numenaute.org/</alias>
+                                        <alias desc="regex pattern of aliasname"/>
+                                </group>
+                                <!-- More "group"s possible here -->
+                        </alias_groups>
+                        <host>kloud.khaganat.net</host>
+                </wopi>
-On mets des liens au Certificats car il faut qu'il soit accessible à l'user "lool":
+</code>
 <code bash>
-cp /etc/letsencrypt/live/office.example.com/cert.pem /etc/loolwsd/cert.pem
-cp /etc/letsencrypt/live/office.example.com/privkey.pem  /etc/loolwsd/key.pem
+systemctl restart coolwsd.service
-cp /etc/letsencrypt/live/office.example.com/chain.pem /etc/loolwsd/ca-chain.cert.pem
-chown lool /etc/loolwsd/cert.pem
-chown lool /etc/loolwsd/key.pem
-chown lool /etc/loolwsd/ca-chain.cert.pem
-systemctl restart loolwsd.service
 </code>
-Votre installation est accessible à https://office.example.com:9980
 =====nginx======
-Si on veut qu'il soit accessible depuis le port 443:
+On utilise un conteneur proxy Nginx:
 <code bash>
+server {
+ listen       10.0.0.10:80;
+ server_name  office.numenaute.org;
+ return      301 https://office.numenaute.org$request_uri;
+}
 server {
-    listen       443 ssl;
+ listen       10.0.0.10:443 ssl;
-    server_name  office.example.com;
+ server_name  office.numenaute.org;
-    ssl_certificate /path/to/ssl_certificate;
+ ssl_certificate "/etc/letsencrypt/live/office.numenaute.org/fullchain.pem";
-    ssl_certificate_key /path/to/ssl_certificate_key;
+ ssl_certificate_key "/etc/letsencrypt/live/office.numenaute.org/privkey.pem";
-    # static files
-    location ^~ /loleaflet {
-        proxy_pass https://localhost:9980;
-        proxy_set_header Host $http_host;
-    }
-    # WOPI discovery URL
+ # static files
-    location ^~ /hosting/discovery {
+ location ^~ /browser {
-        proxy_pass https://localhost:9980;
+   proxy_pass http://10.0.0.28:9980;
-        proxy_set_header Host $http_host;
+   proxy_set_header Host $http_host;
-    }
+ }
-    # Capabilities
+ # WOPI discovery URL
-    location ^~ /hosting/capabilities {
+ location ^~ /hosting/discovery {
-        proxy_pass https://localhost:9980;
+   proxy_pass http://10.0.0.28:9980;
-        proxy_set_header Host $http_host;
+   proxy_set_header Host $http_host;
-    }
+ }
-    # main websocket
+ # Capabilities
-    location ~ ^/lool/(.*)/ws$ {
+ location ^~ /hosting/capabilities {
-        proxy_pass https://localhost:9980;
+   proxy_pass http://10.0.0.28:9980;
-        proxy_set_header Upgrade $http_upgrade;
+   proxy_set_header Host $http_host;
-        proxy_set_header Connection "Upgrade";
+ }
-        proxy_set_header Host $http_host;
-        proxy_read_timeout 36000s;
-    }
-    # download, presentation and image upload
+ # main websocket
-    location ~ ^/lool {
+ location ~ ^/cool/(.*)/ws$ {
-        proxy_pass https://localhost:9980;
+   proxy_pass http://10.0.0.28:9980;
-        proxy_set_header Host $http_host;
+   proxy_set_header Upgrade $http_upgrade;
-    }
+   proxy_set_header Connection "Upgrade";
+   proxy_set_header Host $http_host;
+   proxy_read_timeout 36000s;
+ }
+ # download, presentation and image upload
+ location ~ ^/(c|l)ool {
+   proxy_pass http://10.0.0.28:9980;
+   proxy_set_header Host $http_host;
+ }
+ # Admin Console websocket
+ location ^~ /cool/adminws {
+   proxy_pass http://1O.O.O.28:9980;
+   proxy_set_header Upgrade $http_upgrade;
+   proxy_set_header Connection "Upgrade";
+   proxy_set_header Host $http_host;
+   proxy_read_timeout 36000s;
+ }
-    # Admin Console websocket
-    location ^~ /lool/adminws {
-        proxy_pass https://localhost:9980;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "Upgrade";
-        proxy_set_header Host $http_host;
-        proxy_read_timeout 36000s;
-    }
 }
 </code>
 {{tag>libreoffice outils server kloud}}