OnlyOffice set up over HTTPS?

[thoroughmas]

I'm so keen to hear if anyone has a set up that allows them to use OnlyOffice in Filebrowser Quantum with remote access (VPN/tunnel/reverse proxy).

I've been trying over Pangolin and Tailscale connections.

Tailscale actually works as long as I use only http connections across the board.

But as soon as HTTPS gets involved, I can't get any of the OnlyOffice integration to load in Filebrowser.

With Pangolin my browser console reports this when I try to open an OnlyOffice document:

Client config: 
Proxy { <target>: {…}, <handler>: {…} }
index-CExKJwsp.js:1314:31289
HTTPS-Only Mode: Upgrading insecure request “http://100.73.197.84:3000/web-apps/apps/api/documents/api.js?shardkey=28129d0bac49d72f89c49d6fa06776be6a87872cf7e372f5229eb0194ec27f32” to use “https”. api.js
HTTPS-Only Mode: Upgrading insecure request “https://100.73.197.84:3000/web-apps/apps/api/documents/api.js?shardkey=28129d0bac49d72f89c49d6fa06776be6a87872cf7e372f5229eb0194ec27f32” failed. (M21-C12263) api.js
Loading failed for the <script> with source “http://100.73.197.84:3000/web-apps/apps/api/documents/api.js?shardkey=28129d0bac49d72f89c49d6fa06776be6a87872cf7e372f5229eb0194ec27f32”. AB meeting 14 May 2024.odt:1:1
Error load DocsAPI from http://100.73.197.84:3000 index-CExKJwsp.js:1314:30356

[BaccanoMob]

I made it work but its with Traefik (+ Tailscale/Local) with https. I had to use self signed certs (to make it make onlyoffice use https by default) + file provider (to verify the certs which is not possible via labels).

I have not used Pangolin (and also did not check it out) but heard it uses Traefik under the hood. Can you answer a couple of questions to check what I used will work for you or not.

1. Can you add file provider in Pangolin?
2. Do you use compose files with Pangolin? if not can you manually assign an ipv4 address to a container?

Well, you if both are yes, I think I can help you.

Also, can you check if onlyoffice works with firefox (or its forks) with your current setup? Last time I used that as a workaround till I changed to self signed setup.

[BaccanoMob]

@thoroughmas check #1237 if it works if you try that. (Sorry for the delay, I finally had some time to do it)