Différences

Ci-dessous, les différences entre deux révisions de la page.

--- infrastructure:services:cloud:collabora:install [27/04/2023 14:05] – Stéphane Paillet
+++ infrastructure:services:cloud:collabora:install [28/04/2023 06:51] (Version actuelle) – Stéphane Paillet
@@ Ligne 1: / Ligne 1: @@
 ====== Installation Collabora Online Development Edition ======
-Nous installons le paquet dirmngr pour pouvoir ensuite récupérer la clé GPG publique du dépôt
-<code>
-sudo aptitude install dirmngr
-</code>
 Nous récupérons la clé publique du dépôt
 <code>
-sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0C54D189F4BA284D
+cd /usr/share/keyrings
+sudo wget https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg
 </code>
@@ Ligne 19: / Ligne 15: @@
 <code>
 sudo aptitude update && sudo aptitude install apt install coolwsd code-brand hunspell-fr
+</code>
+===== Nginx =====
+Nous installons Nginx
+<code>
+sudo apt install nginx
+</code>
+Nous configurons le vHost
+<code>
+sudo vi /etc/nginx/sites-available/collabora.grohub.org
+</code>
+<code>
+server {
+    listen 80;
+    server_name collabora.grohub.org;
+  # enforce https
+    return 301 https://$host$request_uri;
+}
+server {
+    listen 443 ssl;
+    server_name  collabora.grohub.org;
+  # Logs
+    access_log  /var/log/nginx/collabora.collabora.grohub.org.access.log;
+    error_log  /var/log/nginx/collabora.collabora.grohub.org.error.log;
+    # Use Mozilla's guidelines for SSL/TLS settings
+    # https://mozilla.github.io/server-side-tls/ssl-config-generator/
+    # NOTE: some settings below might be redundant
+    ssl_certificate /etc/ssl/certs/cloud.collabora.grohub.org.pem;
+    ssl_certificate_key /etc/ssl/private/cloud.collabora.grohub.org.key;
+    ssl_protocols TLSv1.2;
+    # static files
+    location ^~ /browser {
+        proxy_pass http://127.0.0.1:9980;
+        proxy_set_header Host $http_host;
+    }
+    # WOPI discovery URL
+    location ^~ /hosting/discovery {
+        proxy_pass http://127.0.0.1:9980;
+        proxy_set_header Host $http_host;
+    }
+    # Capabilities
+    location ^~ /hosting/capabilities {
+        proxy_pass http://127.0.0.1:9980;
+        proxy_set_header Host $http_host;
+    }
+    # main websocket
+    location ~ ^/cool/(.*)/ws$ {
+        proxy_pass http://127.0.0.1:9980;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+        proxy_set_header Host $http_host;
+        proxy_read_timeout 36000s;
+    }
+    # download, presentation and image upload
+    location ~ ^/(c|l)ool {
+        proxy_pass http://127.0.0.1:9980;
+        proxy_set_header Host $http_host;
+    }
+    # Admin Console websocket
+    location ^~ /cool/adminws {
+        proxy_pass http://127.0.0.1:9980;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+        proxy_set_header Host $http_host;
+        proxy_read_timeout 36000s;
+    }
+}
 </code>