kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-10-19 20:45:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
06e4323faa846f2c10058e37ed9cc25955041f51
computer-playbook/roles/web-svc-collabora
History
Kevin Veen-Birkenbach 6a8e0f38d8 fix(web-svc-collabora): add required Docker capabilities and resource limits for Collabora Jails 
- Added security_opt (seccomp=unconfined, apparmor=unconfined) and cap_add (MKNOD, SYS_CHROOT, SETUID, SETGID, FOWNER)
  to allow Collabora's sandbox (coolmount/systemplate) to mount and chroot properly
- Increased resource limits (2 CPUs, 2 GB RAM, 2048 PIDs) to prevent document timeout and OOM issues
- Resolves 'coolmount: Operation not permitted' and systemplate performance warnings

Refs: https://chatgpt.com/share/68ed03cd-1afc-800f-904e-d1c1cb133914
2025-10-13 15:52:50 +02:00
..
config
fix(web-svc-collabora): add required Docker capabilities and resource limits for Collabora Jails
2025-10-13 15:52:50 +02:00
meta
…
tasks
Override docker conf variables from parents
2025-09-27 02:41:13 +02:00
templates
fix(web-svc-collabora): add required Docker capabilities and resource limits for Collabora Jails
2025-10-13 15:52:50 +02:00
vars
web-svc-collabora: localize vars, adjust CSP, fix systemd perms; refactor role composition
2025-08-21 16:48:37 +02:00
README.md
…

README.md

Docker Collabora (DRAFT)

Description

This Ansible role deploys Collabora Online (CODE) in Docker to enable real-time, in-browser document editing for Nextcloud. It automates the setup of the Collabora CODE container, Nginx reverse proxy configuration, network isolation via Docker networks, and environment variable management.

Overview

  • Dockerized Collabora CODE: Uses the official collabora/code image.
  • Nginx Reverse Proxy: Configures a public-facing proxy with TLS termination and WebSocket support for /cool/ paths.
  • Docker Network Management: Creates an isolated /28 subnet for Collabora and connects containers securely.
  • Environment Configuration: Generates a .env file with domain, credentials, and extra parameters for Collabora's WOPI server.

Features

  • Automatic creation of a dedicated Docker network for Collabora.
  • Proxy configuration template for Nginx with long timeouts and WebSocket upgrades.
  • Customizable domain names and ports via Ansible variables.
  • Support for SSL termination at the proxy level.
  • Integration hooks to restart Nginx and recreate Docker Compose stacks on changes.

Documentation

See the role’s README.md, task files, and Jinja2 templates in the roles/web-svc-collabora directory for usage examples and variable definitions.

Further Resources