From 05fff2516246d286cd5d0e2c996cbb69e27bd102 Mon Sep 17 00:00:00 2001 From: Anja Barz Date: Wed, 5 Nov 2025 13:32:44 +0100 Subject: [PATCH 1/6] adding the frontend version checker --- .../configuration/frontend-update-check.md | 44 +++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 docs/admin/configuration/frontend-update-check.md diff --git a/docs/admin/configuration/frontend-update-check.md b/docs/admin/configuration/frontend-update-check.md new file mode 100644 index 00000000..d210ea26 --- /dev/null +++ b/docs/admin/configuration/frontend-update-check.md @@ -0,0 +1,44 @@ +--- +sidebar_position: 15 +id: frontend-check-updates +title: Frontend Update check +description: How to disable the frontend check for updates in OpenCloud. +draft: false +--- + +# Disable frontend update check + +## Disable Frontend Update Check + +By default, OpenCloud performs a frontend check to verify if you are running the latest version. + +TO DO add screenshot from the version + +### Edit the `.env` File + +Open the environment configuration file located in your `opencloud-compose` directory: + +```bash +nano opencloud-compose/.env +``` + +Add the following environment variable to disable the frontend check for updates: + +```env +FRONTEND_CHECK_FOR_UPDATES=false +``` + +## Restart Docker Services + +After saving the file, shut down and restart the Docker containers to apply the changes: + +```bash +docker compose down +docker compose up -d +``` + +## Result + +The frontend will no longer display a message about newer versions being available. + +TO DO add screenshot that the checker is no longer shown \ No newline at end of file From 994fc9be4428add3c76ca784d21cc2a7635bd61e Mon Sep 17 00:00:00 2001 From: Anja Barz Date: Thu, 20 Nov 2025 10:50:24 +0100 Subject: [PATCH 2/6] adjust the ngnix config --- .../configuration/frontend-update-check.md | 6 +- .../docker-compose/docker-external-proxy.md | 115 ++++++++++-------- 2 files changed, 68 insertions(+), 53 deletions(-) diff --git a/docs/admin/configuration/frontend-update-check.md b/docs/admin/configuration/frontend-update-check.md index d210ea26..373b7bfe 100644 --- a/docs/admin/configuration/frontend-update-check.md +++ b/docs/admin/configuration/frontend-update-check.md @@ -8,13 +8,11 @@ draft: false # Disable frontend update check -## Disable Frontend Update Check - By default, OpenCloud performs a frontend check to verify if you are running the latest version. TO DO add screenshot from the version -### Edit the `.env` File +## Edit the `.env` File Open the environment configuration file located in your `opencloud-compose` directory: @@ -41,4 +39,4 @@ docker compose up -d The frontend will no longer display a message about newer versions being available. -TO DO add screenshot that the checker is no longer shown \ No newline at end of file +TO DO add screenshot that the checker is no longer shown diff --git a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md index 75bd0c01..e0a21d17 100644 --- a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md +++ b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md @@ -164,75 +164,92 @@ Paste the following configuration and adjust the URLs: ```nginx # Redirect HTTP to HTTPS server { - listen 80; - server_name cloud.YOUR.DOMAIN collabora.YOUR.DOMAIN wopiserver.YOUR.DOMAIN; +listen 80; +server_name cloud.YOUR.DOMAIN collabora.YOUR.DOMAIN wopiserver.YYOUR.DOMAIN; - location /.well-known/acme-challenge/ { - root /var/www/certbot; - } +location /.well-known/acme-challenge/ { +root /var/www/certbot; +} - location / { - return 301 https://$host$request_uri; - } +location / { +return 301 https://$host$request_uri; +} } # OpenCloud server { - listen 443 ssl; - server_name cloud.YOUR.DOMAIN; - - ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; - - location / { - proxy_pass http://127.0.0.1:9200; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } +listen 443 ssl http2; +server_name cloud.YOUR.DOMAIN; + +ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; +# Increase max upload size (required for Tus — without this, uploads over 1 MB fail) +client_max_body_size 10M; +# Disable buffering - essential for SSE +proxy_buffering off; +proxy_request_buffering off; + +# Extend timeouts for long connections +proxy_read_timeout 3600s; +proxy_send_timeout 3600s; +keepalive_requests 100000; +keepalive_timeout 5m; +http2_max_concurrent_streams 512; + +# Prevent nginx from trying other upstreams +proxy_next_upstream off; + +location / { +proxy_pass http://127.0.0.1:9200; +proxy_set_header Host $host; +proxy_set_header X-Real-IP $remote_addr; +proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +proxy_set_header X-Forwarded-Proto $scheme; +} } # Collabora server { - listen 443 ssl; - server_name collabora.YOUR.DOMAIN; +listen 443 ssl http2; +server_name collabora.YOUR.DOMAIN; - ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; +ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; +# Increase max upload size to collabora editor +client_max_body_size 10M; - location / { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Host $host; - } +location / { +proxy_pass http://127.0.0.1:9980; +proxy_set_header Host $host; +} - location ~ ^/cool/(.*)/ws$ { - proxy_pass http://127.0.0.1:9980; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "Upgrade"; - proxy_set_header Host $host; - } +location ~ ^/cool/(.*)/ws$ { +proxy_pass http://127.0.0.1:9980; +proxy_set_header Upgrade $http_upgrade; +proxy_set_header Connection "Upgrade"; +proxy_set_header Host $host; +} } # WOPI Server server { - listen 443 ssl; - server_name wopiserver.YOUR.DOMAIN; - - ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; - - location / { - proxy_pass http://127.0.0.1:9300; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } +listen 443 ssl http2; +server_name wopiserver.YOUR.DOMAIN; + +ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; + +location / { +proxy_pass http://127.0.0.1:9300; +proxy_set_header Host $host; +proxy_set_header X-Real-IP $remote_addr; +proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +proxy_set_header X-Forwarded-Proto $scheme; +} } ``` -Thanks to [mitexleo](https://github.com/mitexleo) for the Ngnix example configuration on GitHub +Thanks to [mitexleo](https://github.com/mitexleo) for the Ngnix example configuration on GitHub and [zerox80](https://github.com/zerox80) for the adjustments Enable and reload Nginx: From f906401beacf0652cde9f016dda65fee0c884138 Mon Sep 17 00:00:00 2001 From: Anja Barz Date: Thu, 20 Nov 2025 10:53:03 +0100 Subject: [PATCH 3/6] remove addinital file --- .../configuration/frontend-update-check.md | 42 ------------------- 1 file changed, 42 deletions(-) delete mode 100644 docs/admin/configuration/frontend-update-check.md diff --git a/docs/admin/configuration/frontend-update-check.md b/docs/admin/configuration/frontend-update-check.md deleted file mode 100644 index 373b7bfe..00000000 --- a/docs/admin/configuration/frontend-update-check.md +++ /dev/null @@ -1,42 +0,0 @@ ---- -sidebar_position: 15 -id: frontend-check-updates -title: Frontend Update check -description: How to disable the frontend check for updates in OpenCloud. -draft: false ---- - -# Disable frontend update check - -By default, OpenCloud performs a frontend check to verify if you are running the latest version. - -TO DO add screenshot from the version - -## Edit the `.env` File - -Open the environment configuration file located in your `opencloud-compose` directory: - -```bash -nano opencloud-compose/.env -``` - -Add the following environment variable to disable the frontend check for updates: - -```env -FRONTEND_CHECK_FOR_UPDATES=false -``` - -## Restart Docker Services - -After saving the file, shut down and restart the Docker containers to apply the changes: - -```bash -docker compose down -docker compose up -d -``` - -## Result - -The frontend will no longer display a message about newer versions being available. - -TO DO add screenshot that the checker is no longer shown From bee7ea5011c1d60ba66d2d99540abe986b39b483 Mon Sep 17 00:00:00 2001 From: Anja Barz Date: Thu, 20 Nov 2025 11:33:07 +0100 Subject: [PATCH 4/6] add a note why we adjust the ngnix config --- .../container/docker-compose/docker-external-proxy.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md index e0a21d17..4fac6769 100644 --- a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md +++ b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md @@ -249,6 +249,10 @@ proxy_set_header X-Forwarded-Proto $scheme; } ``` +:::note +We enabled HTTP/2 and increased keep-alive limits to prevent large syncs from failing and ensure stable client connections, since nginx closes connections after ~1,000 requests by default. +::: + Thanks to [mitexleo](https://github.com/mitexleo) for the Ngnix example configuration on GitHub and [zerox80](https://github.com/zerox80) for the adjustments Enable and reload Nginx: From 1617807866f326d2caa79d5ff145f756c773d515 Mon Sep 17 00:00:00 2001 From: Anja Barz Date: Thu, 20 Nov 2025 11:43:50 +0100 Subject: [PATCH 5/6] fix the wrong indentation --- .../docker-compose/docker-external-proxy.md | 138 +++++++++--------- 1 file changed, 70 insertions(+), 68 deletions(-) diff --git a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md index 4fac6769..bcc5dad6 100644 --- a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md +++ b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md @@ -164,88 +164,90 @@ Paste the following configuration and adjust the URLs: ```nginx # Redirect HTTP to HTTPS server { -listen 80; -server_name cloud.YOUR.DOMAIN collabora.YOUR.DOMAIN wopiserver.YYOUR.DOMAIN; + listen 80; + server_name cloud.YOUR.DOMAIN collabora.YOUR.DOMAIN wopiserver.YYOUR.DOMAIN; -location /.well-known/acme-challenge/ { -root /var/www/certbot; -} + location /.well-known/acme-challenge/ { + root /var/www/certbot; + } -location / { -return 301 https://$host$request_uri; -} + location / { + return 301 https://$host$request_uri; + } } # OpenCloud server { -listen 443 ssl http2; -server_name cloud.YOUR.DOMAIN; - -ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; -ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; -# Increase max upload size (required for Tus — without this, uploads over 1 MB fail) -client_max_body_size 10M; -# Disable buffering - essential for SSE -proxy_buffering off; -proxy_request_buffering off; - -# Extend timeouts for long connections -proxy_read_timeout 3600s; -proxy_send_timeout 3600s; -keepalive_requests 100000; -keepalive_timeout 5m; -http2_max_concurrent_streams 512; - -# Prevent nginx from trying other upstreams -proxy_next_upstream off; - -location / { -proxy_pass http://127.0.0.1:9200; -proxy_set_header Host $host; -proxy_set_header X-Real-IP $remote_addr; -proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; -proxy_set_header X-Forwarded-Proto $scheme; -} + listen 443 ssl http2; + server_name cloud.YOUR.DOMAIN; + + ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; + + # Increase max upload size (required for Tus — without this, uploads over 1 MB fail) + client_max_body_size 10M; + + # Disable buffering - essential for SSE + proxy_buffering off; + proxy_request_buffering off; + + # Extend timeouts for long connections + proxy_read_timeout 3600s; + proxy_send_timeout 3600s; + keepalive_requests 100000; + keepalive_timeout 5m; + http2_max_concurrent_streams 512; + + # Prevent nginx from trying other upstreams + proxy_next_upstream off; + + location / { + proxy_pass http://127.0.0.1:9200; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } } # Collabora server { -listen 443 ssl http2; -server_name collabora.YOUR.DOMAIN; - -ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; -ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; -# Increase max upload size to collabora editor -client_max_body_size 10M; - -location / { -proxy_pass http://127.0.0.1:9980; -proxy_set_header Host $host; -} - -location ~ ^/cool/(.*)/ws$ { -proxy_pass http://127.0.0.1:9980; -proxy_set_header Upgrade $http_upgrade; -proxy_set_header Connection "Upgrade"; -proxy_set_header Host $host; -} + listen 443 ssl http2; + server_name collabora.YOUR.DOMAIN; + + ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; + # Increase max upload size to collabora editor + client_max_body_size 10M; + + location / { + proxy_pass http://127.0.0.1:9980; + proxy_set_header Host $host; + } + + location ~ ^/cool/(.*)/ws$ { + proxy_pass http://127.0.0.1:9980; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "Upgrade"; + proxy_set_header Host $host; + } } # WOPI Server server { -listen 443 ssl http2; -server_name wopiserver.YOUR.DOMAIN; - -ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; -ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; - -location / { -proxy_pass http://127.0.0.1:9300; -proxy_set_header Host $host; -proxy_set_header X-Real-IP $remote_addr; -proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; -proxy_set_header X-Forwarded-Proto $scheme; -} + listen 443 ssl http2; + server_name wopiserver.YOUR.DOMAIN; + + ssl_certificate /etc/letsencrypt/live/cloud.YOUR.DOMAIN/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cloud.YOUR.DOMAIN/privkey.pem; + + location / { + proxy_pass http://127.0.0.1:9300; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } } ``` From 6436c5e72518e2dba0531a1a00f505326350b653 Mon Sep 17 00:00:00 2001 From: Anja Barz Date: Thu, 20 Nov 2025 14:23:24 +0100 Subject: [PATCH 6/6] Update docs/admin/getting-started/container/docker-compose/docker-external-proxy.md Co-authored-by: Michael Barz --- .../container/docker-compose/docker-external-proxy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md index 835b379c..9395d412 100644 --- a/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md +++ b/docs/admin/getting-started/container/docker-compose/docker-external-proxy.md @@ -165,7 +165,7 @@ Paste the following configuration and adjust the URLs: # Redirect HTTP to HTTPS server { listen 80; - server_name cloud.YOUR.DOMAIN collabora.YOUR.DOMAIN wopiserver.YYOUR.DOMAIN; + server_name cloud.YOUR.DOMAIN collabora.YOUR.DOMAIN wopiserver.YOUR.DOMAIN; location /.well-known/acme-challenge/ { root /var/www/certbot;