Debian
Debian-France
Debian-Facile
Debian-fr.org
Forum-Debian.fr
Debian ?
Communautés
Vous n'êtes pas identifié(e).
L'icône rouge permet de télécharger chaque page du wiki visitée au format
PDF et la grise au format ODT →
Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentes Révision précédente Prochaine révision | Révision précédente Prochaine révision Les deux révisions suivantes | ||
|
utilisateurs:lagrenouille:tutos:nextcloud-v.17 [25/10/2019 12:51] captnfab [Installation] |
utilisateurs:lagrenouille:tutos:nextcloud-v.17 [04/11/2019 23:33] lagrenouille [collabora online] |
||
|---|---|---|---|
| Ligne 1: | Ligne 1: | ||
| ====== installation et configuration de nextcloud====== | ====== installation et configuration de nextcloud====== | ||
| - | * Objet : tuto nextcloud par lagrenouille | + | * Objet : tuto nextcloud et collabora online : par lagrenouille et Manu |
| * Niveau requis : {{tag>débutant avisé}} | * Niveau requis : {{tag>débutant avisé}} | ||
| * Débutant, à savoir : [[:doc:systeme:commandes:le_debianiste_qui_papillonne|Utiliser GNU/Linux en ligne de commande, tout commence là !.]] :-) | * Débutant, à savoir : [[:doc:systeme:commandes:le_debianiste_qui_papillonne|Utiliser GNU/Linux en ligne de commande, tout commence là !.]] :-) | ||
| Ligne 19: | Ligne 19: | ||
| Pour l’installation, j’ai suivi la doc du site de nextcloud | Pour l’installation, j’ai suivi la doc du site de nextcloud | ||
| + | === le premier vhost nextcloud.conf === | ||
| + | |||
| + | <code><VirtualHost *:80> | ||
| + | ServerAdmin lagrenouille@localhost | ||
| + | ServerName funambule.org | ||
| + | ServerAlias www.funambule.org | ||
| + | ServerAlias cumulus | ||
| + | |||
| + | DocumentRoot /var/www/html/nextcloud/ | ||
| + | |||
| + | <Directory /var/www/html/nextcloud/> | ||
| + | Options +FollowSymLinks | ||
| + | AllowOverride all | ||
| + | Require all granted | ||
| + | <IfModule mod_dav.c> | ||
| + | Dav off | ||
| + | </IfModule> | ||
| + | SetEnv HOME /var/www/html/nextcloud/ | ||
| + | SetEnv HTTP_HOME /var/www/html/nextcloud/ | ||
| + | </Directory> | ||
| + | |||
| + | ErrorLog /var/log/apache2/nextcloud/error.log | ||
| + | LogLevel warn | ||
| + | CustomLog /var/log/apache2/nextcloud/access.log combined | ||
| + | <ifModule mod_rewrite.c> | ||
| + | RewriteEngine On | ||
| + | </ifModule> | ||
| + | </VirtualHost></code> | ||
| + | | ||
| j’ai eu quelques erreurs qui me demandait d’installer les paquets suivant : | j’ai eu quelques erreurs qui me demandait d’installer les paquets suivant : | ||
| Ligne 39: | Ligne 68: | ||
| chmod -R 755 nextcloud/ # (ou 770)</code> | chmod -R 755 nextcloud/ # (ou 770)</code> | ||
| - | __pour que tous les utilisateurs du serveur puisse lire les fichiers, j'ai mis les data à 755__ | + | __pour que tous les utilisateurs du serveur puisse lire, supprimer et renommer fichiers, j'ai mis les data à 755__ |
| Ligne 244: | Ligne 273: | ||
| dehydrated -c</code> | dehydrated -c</code> | ||
| | | ||
| + | | ||
| + | **mes clés privées et publiques ainsi que mon certificat seront disponibles dans le répertoire /var/lib/dehydrated/certs/funambule.org** | ||
| + | |||
| + | <code user>ls -lha /var/lib/dehydrated/certs/funambule.org/</code> | ||
| + | <code>cert-1571438695.csr cert.pem privkey-1571438695.pem | ||
| + | cert-1571438695.pem chain-1571439065.pem privkey-1571439065.pem | ||
| + | cert-1571439065.csr chain.pem privkey.pem | ||
| + | cert-1571439065.pem fullchain-1571439065.pem | ||
| + | cert.csr fullchain.pem | ||
| + | </code> | ||
| + | |||
| | | ||
| **Réactivé nextcloud-ssl et relancé apache2** | **Réactivé nextcloud-ssl et relancé apache2** | ||
| Ligne 249: | Ligne 289: | ||
| systemctl restart apache2</code> | systemctl restart apache2</code> | ||
| - | == le vhost https dans /etc/apache2/sites-available/nextcloud-ssl.conf == | + | === le vhost nextcloud.conf modifié et simplifié, juste pour la redirection === |
| + | <code><VirtualHost *:80> | ||
| + | ServerName funambule.org | ||
| + | ServerAlias www.funambule.org | ||
| + | RedirectMatch ^(.*)$ https://funambule.org/$1 | ||
| + | </VirtualHost> | ||
| + | </code> | ||
| - | <code> <VirtualHost *:443> | + | |
| + | == le vhost https dans /etc/apache2/sites-available/nextcloud-ssl.conf == | ||
| + | <code><VirtualHost *:443> | ||
| ServerAdmin lagrenouille@localhost | ServerAdmin lagrenouille@localhost | ||
| ServerName funambule.org | ServerName funambule.org | ||
| Ligne 263: | Ligne 311: | ||
| </IfModule> | </IfModule> | ||
| - | DocumentRoot /var/www/html/funambule/ | + | DocumentRoot /var/www/html/nextcloud/ |
| - | <Directory /var/www/html/funambule/> | + | |
| - | Require all granted | + | |
| - | </Directory> | + | |
| - | Alias /nextcloud /var/www/html/nextcloud | ||
| <Directory /var/www/html/nextcloud/> | <Directory /var/www/html/nextcloud/> | ||
| Options +FollowSymLinks | Options +FollowSymLinks | ||
| Ligne 320: | Ligne 364: | ||
| );</code> | );</code> | ||
| - | |||
| - | === le premier vhost nextcloud.conf === | ||
| - | |||
| - | <code><VirtualHost *:80> | ||
| - | ServerAdmin lagrenouille@localhost | ||
| - | ServerName funambule.org | ||
| - | ServerAlias www.funambule.org | ||
| - | ServerAlias cumulus | ||
| - | |||
| - | DocumentRoot /var/www/html/funambule/ | ||
| - | <Directory /var/www/html/funambule/> | ||
| - | Require all granted | ||
| - | </Directory> | ||
| - | |||
| - | Alias /nextcloud /var/www/html/nextcloud | ||
| - | <Directory /var/www/html/nextcloud/> | ||
| - | Options +FollowSymLinks | ||
| - | AllowOverride all | ||
| - | Require all granted | ||
| - | <IfModule mod_dav.c> | ||
| - | Dav off | ||
| - | </IfModule> | ||
| - | SetEnv HOME /var/www/html/nextcloud/ | ||
| - | SetEnv HTTP_HOME /var/www/html/nextcloud/ | ||
| - | </Directory> | ||
| - | |||
| - | ErrorLog /var/log/apache2/nextcloud/error.log | ||
| - | LogLevel warn | ||
| - | CustomLog /var/log/apache2/nextcloud/access.log combined | ||
| - | <ifModule mod_rewrite.c> | ||
| - | RewriteEngine On | ||
| - | </ifModule> | ||
| - | </VirtualHost></code> | ||
| - | | ||
| - | | ||
| - | === le vhost nextcloud.conf modifié et simplifié, juste pour la redirection === | ||
| - | <code> | ||
| - | <VirtualHost *:80> | ||
| - | ServerName funambule.org | ||
| - | ServerAlias www.funambule.org | ||
| - | RedirectMatch ^(.*)$ https://funambule.org/$1 | ||
| - | </VirtualHost> | ||
| - | </code> | ||
| - | |||
| - | **mes clés privées et publiques ainsi que mon certificat seront disponibles dans le répertoire /var/lib/dehydrated/certs/funambule.org** | ||
| - | |||
| - | <code user>ls -lha /var/lib/dehydrated/certs/funambule.org/</code> | ||
| - | <code>cert-1571438695.csr cert.pem privkey-1571438695.pem | ||
| - | cert-1571438695.pem chain-1571439065.pem privkey-1571439065.pem | ||
| - | cert-1571439065.csr chain.pem privkey.pem | ||
| - | cert-1571439065.pem fullchain-1571439065.pem | ||
| - | cert.csr fullchain.pem | ||
| - | </code> | ||
| === 4) Installation des modules recommandés === | === 4) Installation des modules recommandés === | ||
| Ligne 379: | Ligne 370: | ||
| </note> | </note> | ||
| | | ||
| - | <code root> apt install intl imagick </code> | + | <code root> apt install php-intl php-imagick </code> |
| === 5) Migration de SQLite vers MariaDB === | === 5) Migration de SQLite vers MariaDB === | ||
| Ligne 486: | Ligne 477: | ||
| j’appartiens au groupe www-data, c’est pourquoi j’ai fait un : | j’appartiens au groupe www-data, c’est pourquoi j’ai fait un : | ||
| <code root>chown -R www-data lagrenouille</code> | <code root>chown -R www-data lagrenouille</code> | ||
| + | |||
| + | === Modification du vhost -ssl === | ||
| + | <code><VirtualHost *:443> | ||
| + | ServerAdmin lagrenouille@localhost | ||
| + | ServerName funambule.org | ||
| + | ServerAlias www.funambule.org | ||
| + | ServerAlias cumulus | ||
| + | |||
| + | <IfModule mod_ssl.c> | ||
| + | SSLEngine on | ||
| + | SSLCertificateFile /var/lib/dehydrated/certs/funambule.org/fullchain.pem | ||
| + | SSLCertificateKeyFile /var/lib/dehydrated/certs/funambule.org/privkey.pem | ||
| + | </IfModule> | ||
| + | |||
| + | DocumentRoot /var/www/html/funambule/ | ||
| + | <Directory /var/www/html/funambule/> | ||
| + | Require all granted | ||
| + | </Directory> | ||
| + | |||
| + | Alias /nextcloud /var/www/html/nextcloud | ||
| + | <Directory /var/www/html/nextcloud/> | ||
| + | Options +FollowSymLinks | ||
| + | AllowOverride all | ||
| + | Require all granted | ||
| + | <IfModule mod_dav.c> | ||
| + | Dav off | ||
| + | </IfModule> | ||
| + | SetEnv HOME /var/www/html/nextcloud/ | ||
| + | SetEnv HTTP_HOME /var/www/html/nextcloud/ | ||
| + | </Directory> | ||
| + | |||
| + | ErrorLog /var/log/apache2/nextcloud/error.log | ||
| + | LogLevel warn | ||
| + | CustomLog /var/log/apache2/nextcloud/access.log combined | ||
| + | <ifModule mod_rewrite.c> | ||
| + | RewriteEngine On | ||
| + | </ifModule> | ||
| + | </VirtualHost></code> | ||
| ** Notes :** | ** Notes :** | ||
| Ligne 499: | Ligne 528: | ||
| PS :** merci à captnfab pour ses aides et à Manu pour son script python.. | PS :** merci à captnfab pour ses aides et à Manu pour son script python.. | ||
| + | |||
| + | ======les commandes occ de nextcloud====== | ||
| + | |||
| + | La commande occ de Nextcloud (provenant de "ownCloud Console") est l'interface de ligne de commande de Nextcloud. Vous pouvez effectuer de nombreuses opérations de serveur courantes avec occ, telles que l'installation et la mise à niveau de Nextcloud, la gestion des utilisateurs, le cryptage, les mots de passe, les paramètres LDAP, etc. | ||
| + | |||
| + | occ est dans le répertoire nextcloud/ | ||
| + | Exécuter occ en tant qu'utilisateur HTTP (www-data pour debian) | ||
| + | |||
| + | Rajoutez vous au groupe sudo si ce n'est pas fait: | ||
| + | <code root>adduser popol sudo</code> | ||
| + | <code>Ajout de l'utilisateur « popol » au groupe « sudo »... | ||
| + | Adding user popol to group sudo</code> | ||
| + | |||
| + | |||
| + | |||
| + | <code root>sudo -u www-data php occ list</code> | ||
| + | <code>cumulus 16.0.5 | ||
| + | |||
| + | Usage: | ||
| + | command [options] [arguments] | ||
| + | |||
| + | Options: | ||
| + | -h, --help Display this help message | ||
| + | -q, --quiet Do not output any message | ||
| + | -V, --version Display this application version | ||
| + | --ansi Force ANSI output | ||
| + | --no-ansi Disable ANSI output | ||
| + | -n, --no-interaction Do not ask any interactive question | ||
| + | --no-warnings Skip global warnings, show command output only | ||
| + | -v|vv|vvv, --verbose Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug | ||
| + | |||
| + | Available commands: | ||
| + | check check dependencies of the server environment | ||
| + | help Displays help for a command | ||
| + | list Lists commands | ||
| + | status show some status information | ||
| + | upgrade run upgrade routines after installation of a new release. The release has to be installed before. | ||
| + | activity | ||
| + | activity:send-mails Sends the activity notification mails | ||
| + | app | ||
| + | app:check-code check code to be compliant | ||
| + | app:disable disable an app | ||
| + | app:enable enable an app | ||
| + | app:getpath Get an absolute path to the app directory | ||
| + | app:install install an app | ||
| + | app:list List all available apps | ||
| + | app:remove remove an app | ||
| + | app:update update an app or all apps | ||
| + | background | ||
| + | background:ajax Use ajax to run background jobs | ||
| + | background:cron Use cron to run background jobs | ||
| + | background:webcron Use webcron to run background jobs | ||
| + | config | ||
| + | config:app:delete Delete an app config value | ||
| + | config:app:get Get an app config value | ||
| + | config:app:set Set an app config value | ||
| + | config:import Import a list of configs | ||
| + | config:list List all configs | ||
| + | config:system:delete Delete a system config value | ||
| + | config:system:get Get a system config value | ||
| + | config:system:set Set a system config value | ||
| + | dav | ||
| + | dav:create-addressbook Create a dav addressbook | ||
| + | dav:create-calendar Create a dav calendar | ||
| + | dav:list-calendars List all calendars of a user | ||
| + | dav:move-calendar Move a calendar from an user to another | ||
| + | dav:remove-invalid-shares Remove invalid dav shares | ||
| + | dav:sync-birthday-calendar Synchronizes the birthday calendar | ||
| + | dav:sync-system-addressbook Synchronizes users to the system addressbook | ||
| + | db | ||
| + | db:add-missing-indices Add missing indices to the database tables | ||
| + | db:convert-filecache-bigint Convert the ID columns of the filecache to BigInt | ||
| + | db:convert-mysql-charset Convert charset of MySQL/MariaDB to use utf8mb4 | ||
| + | db:convert-type Convert the Nextcloud database to the newly configured one | ||
| + | deck | ||
| + | deck:export Export a JSON dump of user data | ||
| + | encryption | ||
| + | encryption:change-key-storage-root Change key storage root | ||
| + | encryption:decrypt-all Disable server-side encryption and decrypt all files | ||
| + | encryption:disable Disable encryption | ||
| + | encryption:enable Enable encryption | ||
| + | encryption:encrypt-all Encrypt all files for all users | ||
| + | encryption:list-modules List all available encryption modules | ||
| + | encryption:set-default-module Set the encryption default module | ||
| + | encryption:show-key-storage-root Show current key storage root | ||
| + | encryption:status Lists the current status of encryption | ||
| + | federation | ||
| + | federation:sync-addressbooks Synchronizes addressbooks of all federated clouds | ||
| + | files | ||
| + | files:cleanup cleanup filecache | ||
| + | files:recommendations:recommend | ||
| + | files:scan rescan filesystem | ||
| + | files:scan-app-data rescan the AppData folder | ||
| + | files:transfer-ownership All files and folders are moved to another user - shares are moved as well. | ||
| + | files_external | ||
| + | files_external:applicable Manage applicable users and groups for a mount | ||
| + | files_external:backends Show available authentication and storage backends | ||
| + | files_external:config Manage backend configuration for a mount | ||
| + | files_external:create Create a new mount configuration | ||
| + | files_external:delete Delete an external mount | ||
| + | files_external:export Export mount configurations | ||
| + | files_external:import Import mount configurations | ||
| + | files_external:list List configured admin or personal mounts | ||
| + | files_external:notify Listen for active update notifications for a configured external mount | ||
| + | files_external:option Manage mount options for a mount | ||
| + | files_external:verify Verify mount configuration | ||
| + | group | ||
| + | group:add Add a group | ||
| + | group:adduser add a user to a group | ||
| + | group:delete Remove a group | ||
| + | group:list list configured groups | ||
| + | group:removeuser remove a user from a group | ||
| + | integrity | ||
| + | integrity:check-app Check integrity of an app using a signature. | ||
| + | integrity:check-core Check integrity of core code using a signature. | ||
| + | integrity:sign-app Signs an app using a private key. | ||
| + | integrity:sign-core Sign core using a private key. | ||
| + | l10n | ||
| + | l10n:createjs Create javascript translation files for a given app | ||
| + | log | ||
| + | log:file manipulate logging backend | ||
| + | log:manage manage logging configuration | ||
| + | log:tail Tail the nextcloud logfile | ||
| + | log:watch Watch the nextcloud logfile | ||
| + | |||
| + | mail:account:create creates IMAP account | ||
| + | mail:account:export Exports a user's IMAP account(s) | ||
| + | maintenance | ||
| + | maintenance:data-fingerprint update the systems data-fingerprint after a backup is restored | ||
| + | maintenance:mimetype:update-db Update database mimetypes and update filecache | ||
| + | maintenance:mimetype:update-js Update mimetypelist.js | ||
| + | maintenance:mode set maintenance mode | ||
| + | maintenance:repair repair this installation | ||
| + | maintenance:theme:update Apply custom theme changes | ||
| + | maintenance:update:htaccess Updates the .htaccess file | ||
| + | maps | ||
| + | maps:scan-photos Rescan photos GPS exif data | ||
| + | maps:scan-tracks Rescan track files | ||
| + | migrations | ||
| + | migrations:execute Execute a single migration version manually. | ||
| + | migrations:generate | ||
| + | migrations:generate-from-schema | ||
| + | migrations:migrate Execute a migration to a specified version or the latest available version. | ||
| + | migrations:status View the status of a set of migrations. | ||
| + | music | ||
| + | music:cleanup clean up orphaned DB entries (this happens also periodically on the background) | ||
| + | music:reset-cache drop data cached by the music app for performance reasons | ||
| + | music:reset-database drop metadata indexed by the music app (artists, albums, tracks, playlists) | ||
| + | music:scan scan and index any unindexed audio files | ||
| + | notification | ||
| + | notification:generate Generate a notification for the given user | ||
| + | security | ||
| + | security:certificates list trusted certificates | ||
| + | security:certificates:import import trusted certificate | ||
| + | security:certificates:remove remove trusted certificate | ||
| + | sharing | ||
| + | sharing:cleanup-remote-storages Cleanup shared storage entries that have no matching entry in the shares_external table | ||
| + | trashbin | ||
| + | trashbin:cleanup Remove deleted files | ||
| + | trashbin:expire Expires the users trashbin | ||
| + | twofactorauth | ||
| + | twofactorauth:cleanup Clean up the two-factor user-provider association of an uninstalled/removed provider | ||
| + | twofactorauth:disable Disable two-factor authentication for a user | ||
| + | twofactorauth:enable Enable two-factor authentication for a user | ||
| + | twofactorauth:enforce Enabled/disable enforced two-factor authentication | ||
| + | twofactorauth:state Get the two-factor authentication (2FA) state of a user | ||
| + | update | ||
| + | update:check Check for server and app updates | ||
| + | user | ||
| + | user:add adds a user | ||
| + | user:delete deletes the specified user | ||
| + | user:disable disables the specified user | ||
| + | user:enable enables the specified user | ||
| + | user:info show user info | ||
| + | user:lastseen shows when the user was logged in last time | ||
| + | user:list list configured users | ||
| + | user:report shows how many users have access | ||
| + | user:resetpassword Resets the password of the named user | ||
| + | user:setting Read and modify user settings | ||
| + | versions | ||
| + | versions:cleanup Delete versions | ||
| + | versions:expire Expires the users file versions</code> | ||
| + | |||
| + | **Une fois dans nextcloud, vous allez dans "applications" et vous activez la console, le prompt est occ** | ||
| + | |||
| + | {{https://debian-facile.org/images/file-Rc9f8506df62ce366b7d814da5187d498.png}} | ||
| + | |||
| + | **vous reste plus qu'a mettre la commande** | ||
| + | |||
| + | **Voir les applications ouvertes ou non** | ||
| + | <code> | ||
| + | occ$ app:list</code> | ||
| + | |||
| + | <code>Enabled: | ||
| + | - accessibility: 1.2.0 | ||
| + | - activity: 2.9.1 | ||
| + | - bruteforcesettings: 1.4.0 | ||
| + | - calendar: 1.7.1 | ||
| + | - cloud_federation_api: 0.2.0 | ||
| + | - comments: 1.6.0 | ||
| + | - contacts: 3.1.6 | ||
| + | - dav: 1.9.2 | ||
| + | - deck: 0.6.6 | ||
| + | - external: 3.3.1 | ||
| + | - federatedfilesharing: 1.6.0 | ||
| + | - federation: 1.6.0 | ||
| + | - files: 1.11.0 | ||
| + | - files_external: 1.7.0 | ||
| + | - files_pdfviewer: 1.5.0 | ||
| + | - files_photospheres: 1.0.5 | ||
| + | - files_rightclick: 0.13.0 | ||
| + | - files_sharing: 1.8.0 | ||
| + | - files_texteditor: 2.8.0 | ||
| + | - files_trashbin: 1.6.0 | ||
| + | - files_versions: 1.9.0 | ||
| + | - files_videoplayer: 1.5.0 | ||
| + | - firstrunwizard: 2.5.0 | ||
| + | - gallery: 18.3.0 | ||
| + | - logreader: 2.1.0 | ||
| + | - lookup_server_connector: 1.4.0 | ||
| + | - mail: 0.17.0 | ||
| + | - maps: 0.1.2 | ||
| + | - music: 0.11.0 | ||
| + | - nextcloud_announcements: 1.5.0 | ||
| + | - notifications: 2.4.1 | ||
| + | - oauth2: 1.4.2 | ||
| + | - ocr: 4.4.13 | ||
| + | - onlyoffice: 3.0.2 | ||
| + | - ownpad: 0.6.13 | ||
| + | - password_policy: 1.6.0 | ||
| + | - privacy: 1.0.0 | ||
| + | - provisioning_api: 1.6.0 | ||
| + | - recommendations: 0.4.0 | ||
| + | - richdocuments: 3.4.2 | ||
| + | - serverinfo: 1.6.0 | ||
| + | - sharebymail: 1.6.0 | ||
| + | - support: 1.0.0 | ||
| + | - survey_client: 1.4.0 | ||
| + | - systemtags: 1.6.0 | ||
| + | - theming: 1.7.0 | ||
| + | - twofactor_backupcodes: 1.5.0 | ||
| + | - updatenotification: 1.6.0 | ||
| + | - user_external: 0.7.0 | ||
| + | - viewer: 1.1.0 | ||
| + | - workflowengine: 1.6.0 | ||
| + | Disabled: | ||
| + | - admin_audit | ||
| + | - carnet | ||
| + | - encryption | ||
| + | - event_update_notification | ||
| + | - files_markdown | ||
| + | - gpxmotion | ||
| + | - user_ldap</code> | ||
| + | |||
| + | |||
| + | |||
| + | ====synchronisez votre cloud sur votre bureau==== | ||
| + | |||
| + | <code root> | ||
| + | apt installe nextcloud-desktop</code> | ||
| + | |||
| + | {{https://debian-facile.org/images/file-R3a37098d2eb9ff4b09bc7817138e6766.png}} | ||
| + | |||
| + | {{https://debian-facile.org/images/file-Rb0ad4b0c42a602ad7dc72cce899ae11e.png}} | ||
| + | |||
| + | |||
| + | =====collabora online ===== | ||
| + | |||
| + | Toujours pareil, la solution sur mon serveur . | ||
| + | |||
| + | <code user>wget https://github.com/nextcloud/richdocuments/releases/download/v3.4.2/richdocuments.tar.gz</code> | ||
| + | <code user>tar xzf richdocuments.tgz</code> | ||
| + | |||
| + | <code root>echo 'deb https://www.collaboraoffice.com/repos/CollaboraOnline/CODE ./' >> /etc/apt/sources.list.d/collabora.conf</code> | ||
| + | <code user> | ||
| + | cat /etc/apt/sources.list.d/collabora.list</code> | ||
| + | <code>deb https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-debian10 ./ | ||
| + | </code> | ||
| + | <code root> | ||
| + | apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0CXXXXXXXXXXXX4D</code> | ||
| + | |||
| + | <code user>apt search loolwsd</code> | ||
| + | <code>En train de trier... Fait | ||
| + | Recherche en texte intégral... Fait | ||
| + | loolwsd/inconnu,now 4.0.8-2 amd64 [installé] | ||
| + | LibreOffice Online WebSocket Daemon | ||
| + | loolwsd-dbgsym/inconnu 4.0.8-2 amd64 | ||
| + | debug symbols for loolwsd</code> | ||
| + | <code user> | ||
| + | apt search code-brand</code> | ||
| + | <code>En train de trier... Fait | ||
| + | Recherche en texte intégral... Fait | ||
| + | code-brand/inconnu,now 4.0-2 all [installé] | ||
| + | Collabora Online Development Edition (CODE) branding | ||
| + | |||
| + | </code> | ||
| + | |||
| + | |||
| + | <code root>apt install loolwsd code-brand</code> | ||
| + | |||
| + | Création d'un sous domaine (cnam) chez gandi | ||
| + | cname collabora.funambule.org | ||
| + | |||
| + | <code root>openssl req -new -x509 -days 365 -nodes -out /etc/loolwsd/ca-chain.cert.pem -keyout /etc/loolwsd/key.pem</code> | ||
| + | |||
| + | <code root>cd /etc/loolwsd/</code> | ||
| + | <code root>ln -s ca-chain.cert.pem cert.pem</code> | ||
| + | <code root>chown lool.lool key.pem</code> | ||
| + | Le chown est important car key.pem est en 400 et par défaut il appartient à root, alors que loolwsd tourne sous le user lool | ||
| + | |||
| + | |||
| + | <code root>ls -lha /etc/loolwsd/</code> | ||
| + | <code>total 60K | ||
| + | drwxr-xr-x 2 root root 4,0K nov. 2 11:11 . | ||
| + | drwxr-xr-x 141 root root 12K nov. 1 14:05 .. | ||
| + | -rw-r--r-- 1 root root 1,3K nov. 1 14:18 ca-chain.cert.pem | ||
| + | lrwxrwxrwx 1 root root 17 nov. 1 14:20 cert.pem -> ca-chain.cert.pem | ||
| + | -rw------- 1 lool lool 1,7K nov. 1 14:18 key.pem | ||
| + | -rw-r--r-- 1 root root 1,7K oct. 23 09:00 loolkitconfig.xcu | ||
| + | -rw-r----- 1 lool lool 13K nov. 1 15:32 loolwsd.xml | ||
| + | -rw-r----- 1 root root 13K nov. 1 14:47 loolwsd.xml.orig | ||
| + | </code> | ||
| + | |||
| + | |||
| + | <code user>cat /etc/apache2/sites-enabled/000-proxy-ssl.conf</code> | ||
| + | <code><VirtualHost *:443> | ||
| + | ServerName collabora.funambule.org | ||
| + | Options -Indexes | ||
| + | |||
| + | # SSL configuration, you may want to take the easy route instead and use Lets Encrypt! | ||
| + | SSLEngine on | ||
| + | SSLCertificateFile /var/lib/dehydrated/certs/funambule.org/fullchain.pem | ||
| + | SSLCertificateKeyFile /var/lib/dehydrated/certs/funambule.org/privkey.pem | ||
| + | #SSLCertificateChainFile /path/to/intermediate_certificate | ||
| + | SSLProtocol all -SSLv2 -SSLv3 | ||
| + | SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:....je raccourcis.......-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-DSS | ||
| + | SSLHonorCipherOrder on | ||
| + | | ||
| + | # Manu rajoute par la suite | ||
| + | TimeOut 6000 | ||
| + | | ||
| + | # Encoded slashes need to be allowed | ||
| + | AllowEncodedSlashes NoDecode | ||
| + | | ||
| + | # Container uses a unique non-signed certificate | ||
| + | SSLProxyEngine On | ||
| + | SSLProxyVerify None | ||
| + | SSLProxyCheckPeerCN Off | ||
| + | SSLProxyCheckPeerName Off | ||
| + | | ||
| + | # keep the host | ||
| + | ProxyPreserveHost On | ||
| + | | ||
| + | # static html, js, images, etc. served from loolwsd | ||
| + | # loleaflet is the client part of Collabora Online | ||
| + | ProxyPass /loleaflet https://127.0.0.1:9980/loleaflet retry=0 | ||
| + | ProxyPassReverse /loleaflet https://127.0.0.1:9980/loleaflet | ||
| + | | ||
| + | # WOPI discovery URL | ||
| + | ProxyPass /hosting/discovery https://127.0.0.1:9980/hosting/discovery retry=0 | ||
| + | ProxyPassReverse /hosting/discovery https://127.0.0.1:9980/hosting/discovery | ||
| + | | ||
| + | # Capabilities | ||
| + | ProxyPass /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities retry=0 | ||
| + | ProxyPassReverse /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities | ||
| + | | ||
| + | # Main websocket | ||
| + | ProxyPassMatch "/lool/(.*)/ws$" wss://127.0.0.1:9980/lool/$1/ws nocanon | ||
| + | | ||
| + | # Admin Console websocket | ||
| + | ProxyPass /lool/adminws wss://127.0.0.1:9980/lool/adminws | ||
| + | # Download as, Fullscreen presentation and Image upload operations | ||
| + | ProxyPass /lool https://127.0.0.1:9980/lool | ||
| + | ProxyPassReverse /lool https://127.0.0.1:9980/lool | ||
| + | |||
| + | </VirtualHost> | ||
| + | </code> | ||
| + | |||
| + | |||
| + | Rajout de l'alias collabora dans nextcloud/config.config.php à la suite de funambule.org | ||
| + | |||
| + | <code>'trusted_domains' => | ||
| + | array ( | ||
| + | 0 => 'funambule.org', | ||
| + | 1 => 'collabora.funambule.org', | ||
| + | </code> | ||
| + | |||
| + | |||
| + | <code root> | ||
| + | systemctl restart loolwsd</code> | ||
| + | <code root>systemctl restart apache2</code> | ||
| + | |||
| + | J'ai du ouvrir les ports dans ma box, 22 interne et 2222 externe pour ssh, 80 et 443 puis 9980 | ||
| + | |||
| + | La création d'un document office ouvre instantanément collabora | ||
| + | |||
| + | {{https://debian-facile.org/images/file-Reed34f4fccb1ea3f63adb221acf4664d.png}} | ||
| + | |||
| + | **Maintenant, voila la seule procédure que j'ai trouvé pour collaborer à plusieurs à l'écriture d'un texte.** | ||
| + | |||
| + | Procedez comme pour un lien normal, mais coller l'adresse d'un des utilisateurs enregistrés, ou de la personne avec qui vous voulez travailler votre texte | ||
| + | cliquez sur l'icone "partagez le lien", collez le dans le courrier des collaborateurs au projet d'écritures, et envoyez, ça devrait le faire. | ||
