Advertisement
apfelcast

OnlyOffice Home-Server

Dec 13th, 2019
23,314
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.58 KB | None | 0 0
  1. #### Install OnlyOffice on a Home-Server ####
  2.  
  3. ### Docker LXC Server ###
  4.  
  5. ## Install docker ##
  6. apt-get update
  7. apt-get install docker.io
  8.  
  9. ### Proxy Server ###
  10.  
  11. ## create Reverse Proxy to Docker LXC ##
  12. nano /etc/apache2/sites-enabled/server3.conf
  13.  
  14. <VirtualHost *:80>
  15. ServerName subdomain12.yourdomain.com
  16. ProxyPreserveHost On
  17. DocumentRoot /var/www/html
  18. ProxyPass /.well-known !
  19. ProxyPass / http://10.1.1.12:80/
  20. ProxyPassReverse / http://10.1.1.12:80/
  21. </VirtualHost>
  22.  
  23. service apache2 restart
  24.  
  25. ## create SSL certificate for Proxy ##
  26. certbot --apache -d
  27.  
  28. ## adjust ssl.conf ##
  29. nano /etc/apache2/sites-enabled/server3-le-ssl.conf
  30.  
  31. # remove everything related to previous proxy
  32. # paste the following between "ServerName" and "Include /etc/..."
  33.  
  34. SSLProxyEngine on
  35. SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384
  36. SSLProtocol All -SSLv2 -SSLv3
  37. SSLCompression off
  38. SSLHonorCipherOrder on
  39.  
  40. SetEnvIf Host "^(.*)$" THE_HOST=$1
  41. RequestHeader setifempty X-Forwarded-Proto https
  42. RequestHeader setifempty X-Forwarded-Host %{THE_HOST}e
  43. ProxyAddHeaders Off
  44.  
  45. ProxyPassMatch (.*)(\/websocket)$ "ws://10.1.1.12:9981/$1$2"
  46. ProxyPass / "http://10.1.1.12:9981/"
  47. ProxyPassReverse / „http://10.1.1.12:9981/"
  48.  
  49. service apache2 restart
  50.  
  51. ## Install OnlyOffice Docker on Docker LXC ##
  52. docker run -i -t -d -p 10.1.1.12:9981:80 -e JWT_ENABLED='true' -e JWT_SECRET='your-secret-key' --restart=always onlyoffice/documentserver
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement