From 2462658f32a8fbc3d9e13d41d9dabd4b9ddc1bf6 Mon Sep 17 00:00:00 2001
From: Lyes Saadi <dev@lyes.eu>
Date: Mon, 27 Oct 2025 03:07:38 +0100
Subject: [PATCH] Adding collabora

---
 hosts/zora/reverse-proxy.nix      | 10 ++++++++++
 modules/server/baba/collabora.nix | 28 ++++++++++++++++++++++++++++
 modules/server/baba/default.nix   |  4 ++++
 3 files changed, 42 insertions(+)
 create mode 100644 modules/server/baba/collabora.nix

diff --git a/hosts/zora/reverse-proxy.nix b/hosts/zora/reverse-proxy.nix
index 0ee107b..9e18e02 100644
--- a/hosts/zora/reverse-proxy.nix
+++ b/hosts/zora/reverse-proxy.nix
@@ -46,6 +46,16 @@
           proxyWebsockets = true;
         };
       };
+      
+      # 9980
+      "collabora.lyes.eu" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://localhost:${toString config.services.collabora-online.port}";
+          proxyWebsockets = true; # collabora a besoin des websockets
+        };
+      };
     };
   };
 }
diff --git a/modules/server/baba/collabora.nix b/modules/server/baba/collabora.nix
new file mode 100644
index 0000000..a69e068
--- /dev/null
+++ b/modules/server/baba/collabora.nix
@@ -0,0 +1,28 @@
+{ ... }:
+
+{
+  services.collabora-online = {
+    enable = true;
+
+    settings = {
+      ssl = {
+        enable = false;
+        termination = true;
+      };
+
+      net = {
+        listen = "loopback";
+        post_allow.host = ["::1" "172.0.0.1"];
+      };
+
+      # ouvre seulement les fichiers depuis nextcloud
+      storage.wopi = {
+        "@allow" = true;
+        host = ["cloud.lyes.eu"];
+      };
+
+      server_name = "collabora.lyes.eu";
+    };
+  };
+}
+
diff --git a/modules/server/baba/default.nix b/modules/server/baba/default.nix
index aba925d..e4d580d 100644
--- a/modules/server/baba/default.nix
+++ b/modules/server/baba/default.nix
@@ -1,6 +1,10 @@
 { config, pkgs, ... }:
 
 {
+  imports = [
+    ./collabora.nix
+  ];
+
   services.nextcloud = {
     enable = true;
     package = pkgs.nextcloud32;