Docker - Nginx - Collabora

server {
    listen       443 ssl;
    server_name  office.example.com;
    ssl_certificate       /etc/nginx/ssl/example.com.crt;
    ssl_certificate_key       /etc/nginx/ssl/example.com.key;

    ssl_session_timeout 5m;
    ssl_ciphers               'AES128+EECDH:AES128+EDH:!aNULL';
    ssl_protocols              TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/nginx/ssl/dhparams.pem;
    ssl_stapling on;
    ssl_stapling_verify on;

    client_max_body_size 10G;

    proxy_set_header     X-Forwarded-Proto 'https';
    underscores_in_headers on;

    add_header Strict-Transport-Security max-age=15768000;
    add_header X-Content-Type-Options nosniff;
    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Robots-Tag none;
    add_header X-Download-Options noopen;
    add_header X-Permitted-Cross-Domain-Policies none;

    access_log  /var/log/nginx/office.access.log;
    error_log   /var/log/nginx/office.error.log;

    proxy_buffering off;

    location = /robots.txt {
        allow all;
        log_not_found off;
        access_log off;


    }

        # static files
    location ^~ /loleaflet {
        proxy_pass        https://192.168.0.100:9980;
        proxy_set_header Host $http_host;
        proxy_ssl_verify              off;
    }


    # WOPI discovery URL
    location ^~ /hosting/discovery {
        proxy_pass        https://192.168.0.100:9980;
        proxy_set_header Host $http_host;
        proxy_ssl_verify              off;

 # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

  # Main websocket
    location ~ /lool/(.*)/ws$ {
        proxy_pass        https://192.168.0.100:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
        proxy_ssl_verify              off;
        # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

    }
# Admin Console websocket
    location ^~ /lool/adminws {
        proxy_pass        http://192.168.0.100:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
        proxy_ssl_verify              off;
        # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

    }

    # download, presentation and image upload
    location ^~ /lool {
        proxy_pass        https://192.168.0.100:9980;
        proxy_set_header Host $http_host;
        proxy_ssl_verify              off;
        # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

    }

    location / {
        proxy_pass        https://192.168.0.100:9980;
        proxy_set_header Host $http_host;
        proxy_ssl_verify              off;

        # WebSocket support
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }


}