Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Collabora Online (CODE)
  3. Allow List for WOPI requests

Allow List for WOPI requests

Scheduled Pinned Locked Moved Solved Collabora Online (CODE)
26 Posts 8 Posters 13.9k Views 8 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • N ntnsndr

    Using 172.18.0.0/16 worked for me on the WOPI whitelist when using built-in CODE server.

    osoboO Offline
    osoboO Offline
    osobo
    wrote on last edited by
    #16

    @ntnsndr said in Allow List for WOPI requests:

    Using 172.18.0.0/16 worked for me on the WOPI whitelist when using built-in CODE server.

    Thank you. I think this is worth mentioning in the CODE setup documentation (https://docs.cloudron.io/apps/collabora/)

    1 Reply Last reply
    0
    • nebulonN Offline
      nebulonN Offline
      nebulon
      Staff
      wrote on last edited by
      #17

      Not sure if this applies to the collabora app we have on Cloudron, I think @ntnsndr is referring to the Nextcloud app which has some built-in code server? Although I wasn't aware that this works on Cloudron at all.

      osoboO 1 Reply Last reply
      1
      • nebulonN nebulon

        Not sure if this applies to the collabora app we have on Cloudron, I think @ntnsndr is referring to the Nextcloud app which has some built-in code server? Although I wasn't aware that this works on Cloudron at all.

        osoboO Offline
        osoboO Offline
        osobo
        wrote on last edited by
        #18

        @nebulon FYI I use Cloudron's Collabora app. I needed to use the 172.18.0.0/16 WOPI whitelist setting just to remove the warning.
        CODE-WOPI-Warning.jpg

        1 Reply Last reply
        1
        • nebulonN Offline
          nebulonN Offline
          nebulon
          Staff
          wrote on last edited by
          #19

          Thanks, I've added a note about this in the docs https://docs.cloudron.io/apps/collabora/

          1 Reply Last reply
          1
          • S Offline
            S Offline
            SebGG
            wrote on last edited by SebGG
            #20

            hi, i have a problem with the wopi adress i think. With wopi blank everything works as assumed. But with the wopi 172.18.0.0/16 not.

            what could be wrong?

            cloudron apps nextcloud and collabora online are installed at the same domain

            1 Reply Last reply
            0
            • nebulonN Offline
              nebulonN Offline
              nebulon
              Staff
              wrote on last edited by
              #21

              This setting is locking down the nextcloud host to only accept WOPI requests from collabora on that subnet, which is the local docker network on Cloudron. I have tried this here and setting 172.18.0.0/16 works as expected. Do you have any more information about the issue?

              1 Reply Last reply
              0
              • nebulonN Offline
                nebulonN Offline
                nebulon
                Staff
                wrote on last edited by
                #22

                @SebGG maybe your system is connecting via ipv6 only there so can you try to use fd00:c107:d509::/64 instead of the ipv4 one?

                1 Reply Last reply
                0
                • S Offline
                  S Offline
                  SebGG
                  wrote on last edited by
                  #23

                  Hi, no, the ipv6 adress also doesnt work. Is there a way to check this in a deeper way?

                  1 Reply Last reply
                  0
                  • nebulonN Offline
                    nebulonN Offline
                    nebulon
                    Staff
                    wrote on last edited by
                    #24

                    Do you see any errors to work with?

                    For explanation, the collabora app backend will contact the Nextcloud instance. So Nextcloud can then only allow incoming requests on those routes by limiting to local connections with setting this netmask.

                    1 Reply Last reply
                    0
                    • S Offline
                      S Offline
                      SebGG
                      wrote on last edited by
                      #25

                      I digged a bit deeper in and here are the logs for two requests for the same document. The first one is with the WOPI adress as documented and the second one it with my external real ipv4 adress. Withe the external real ipv4 adress it works and i can open the documents. i found that here "https://github.com/nextcloud/richdocuments/issues/2685"

                      With Wopi Adress 172.18.0.0/16:

                      "GET /index.php/apps/richdocuments/wopi/files/542576_oc2a6lhu6gbc?access_token=vmAdhoDd9DnOnITRqNn235KjCmxEUwjp&access_token_ttl=0 HTTP/1.1" 403 2 "-" "COOLWSD HTTP Agent 24.04.7.1"
                      "GET /index.php/apps/richdocuments/wopi/files/542576_oc2a6lhu6gbc?access_token=vmAdhoDd9DnOnITRqNn235KjCmxEUwjp&access_token_ttl=0&permission=edit HTTP/1.1" 403 2 "-" "COOLWSD HTTP Agent 24.04.7.1"

                      With Wopi Adress real IPv4 Adress :

                      "GET /index.php/apps/richdocuments/wopi/files/542576_oc2a6lhu6gbc?access_token=YGfINlPRSbkt7OLGw3VHMxuFSE19cX1v&access_token_ttl=0 HTTP/1.1" 200 853 "-" "COOLWSD HTTP Agent 24.04.7.1"
                      "GET /index.php/apps/richdocuments/wopi/files/542576_oc2a6lhu6gbc/contents?access_token=YGfINlPRSbkt7OLGw3VHMxuFSE19cX1v&access_token_ttl=0 HTTP/1.1" 200 6345 "-" "COOLWSD HTTP Agent 24.04.7.1"

                      1 Reply Last reply
                      0
                      • nebulonN Offline
                        nebulonN Offline
                        nebulon
                        Staff
                        wrote on last edited by
                        #26

                        I am no WOPI expert and also cannot reproduce this still. A 403 status code would to me more look like the accesstoken (which is different in both requests you pasted) is invalid. But could be that Nextcloud does return a 403 also for blocked IPs. You have to ask the upstream developers for such details.

                        One idea, can you double check which IP range your local cloudron docker network uses? You can do this via SSH docker network inspect cloudron

                        1 Reply Last reply
                        0
                        Reply
                        • Reply as topic
                        Log in to reply
                        • Oldest to Newest
                        • Newest to Oldest
                        • Most Votes


                        • Login

                        • Don't have an account? Register

                        • Login or register to search.
                        • First post
                          Last post
                        0
                        • Categories
                        • Recent
                        • Tags
                        • Popular
                        • Bookmarks
                        • Search