Add Install Scripts: OpenCloud, OnlyOffice Document Server, Collabora Online

[rhjanssen]

Summary

Three new curated install scripts for deploying a complete OpenCloud document collaboration stack on HexOS/TrueNAS:

• OpenCloud (community train, v4.0.3, chart v1.2.2) — Self-hosted cloud platform (oCIS fork) with file sync, sharing, and optional document collaboration via WOPI
• OnlyOffice Document Server (community train, v9.3.0, chart v1.2.2) — Document editing server for OpenCloud/Nextcloud collaboration
• Collabora Online (stable train, v25.04.9.2.1, chart v1.5.2) — Document editing server, alternative to OnlyOffice

Scripts

File	TrueNAS App Name	Train	Version
opencloud.json	opencloud	community	4.0.3
onlyoffice.json	onlyoffice-document-server	community	9.3.0
collabora.json	collabora	stable	25.04.9.2.1

Installation Questions

OpenCloud

Key	Type	Required	Default	Description
app_url	text	yes	—	HTTPS URL to access OpenCloud
jwt_secret	text	no	$RANDOM_STRING(32)	Shared JWT secret for internal auth and WOPI
enable_collaboration	boolean	no	false	Enable WOPI collaboration
collaboration_type	select	no	collabora	Collabora or OnlyOffice
collaboration_url	text	no	—	URL of collaboration server

OnlyOffice Document Server

Key	Type	Required	Default	Description
jwt_secret	text	no	$RANDOM_STRING(32)	Shared JWT secret for WOPI auth
web_port	number	no	30134	Web access port

Collabora Online

Key	Type	Required	Default	Description
server_name	text	yes	—	Hostname (host:port, no protocol)
aliasgroup	text	yes	—	Allowed connecting domains
admin_user	text	no	admin	Admin console username
admin_password	text	yes	—	Admin password (min 8 chars)
web_port	number	no	9980	Web access port

Key Design Decisions

JWT Secret Coordination (OpenCloud + OnlyOffice)

OpenCloud's TrueNAS chart maps both opencloud.jwt_secret and opencloud.collaboration.jwt_secret to environment variables that must be identical when using OnlyOffice collaboration. This script uses a single jwt_secret question that feeds both fields.

Both OpenCloud and OnlyOffice default to $RANDOM_STRING(32), allowing either app to be installed first. The user copies the generated JWT from whichever app was installed first into the other app's JWT field.

Collabora Uses WOPI Proof Keys (No JWT)

Collabora authenticates via WOPI Proof Keys rather than JWT. OpenCloud sets collaboration.proof_disable: true to bypass proof key validation in insecure/LAN setups. No shared secret is needed between OpenCloud and Collabora.

Storage Layout

• OpenCloud: Three host-path directories under $LOCATION(ApplicationsPerformance)/opencloud/ — config, data, radicale_data. Runs as user/group 568, with apps:apps POSIX permissions.
• OnlyOffice: PostgreSQL data at $LOCATION(ApplicationsPerformance)/onlyoffice/postgres_data with netdata:docker permissions (required by the chart).
• Collabora: No persistent storage needed (stateless).

Resource Allocation

All three scripts request 2 CPUs and $MEMORY(10%, 4096) (10% of system RAM, minimum 4096 MB).

Collabora Password Validation

The TrueNAS Collabora chart enforces ^[a-zA-Z0-9!@#$%^&*?]{8,}$ on the admin password. The description instructs users to use a minimum of 8 characters with only letters, numbers, and !@#%^&*?.

Tested Configurations

• OpenCloud + OnlyOffice collaboration: Verified working with shared JWT secret
• OpenCloud standalone (collaboration disabled): Verified working
• OnlyOffice standalone: Verified working
• Collabora: Validated against chart schema; requires 8+ character admin password

Schema & Macros Used

• Schema version: 3
• Macros: $RANDOM_STRING(), $QUESTION(), $HOST_PATH(), $LOCATION(), $MEMORY()

Checklist

• Scripts validated against live TrueNAS app schemas (truenas/apps repo)
• JSON is valid and uses LF line endings
• No https:// URLs in description strings (avoids HexOS editor parse issues)
• No $ characters in description text (avoids macro parser conflicts)
• Generic language in OnlyOffice/Collabora descriptions (not OpenCloud-specific)
• All app_values fields match TrueNAS chart question variable names
• Default ports match TrueNAS chart defaults

[Copilot]

Pull request overview

Adds three curated HexOS/TrueNAS install scripts to deploy an OpenCloud-based document collaboration stack (OpenCloud + optional OnlyOffice or Collabora).

Changes:

• Added opencloud.json curated install script with optional WOPI collaboration configuration.
• Added onlyoffice.json curated install script with JWT coordination and Postgres host-path storage.
• Added collabora.json curated install script with admin/WebUI and allowed-domain configuration.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 8 comments.

File	Description
docs/public/install-scripts/opencloud.json	New install script for deploying OpenCloud with optional WOPI collaboration settings.
docs/public/install-scripts/onlyoffice.json	New install script for deploying OnlyOffice Document Server with configurable web port and persistent Postgres data.
docs/public/install-scripts/collabora.json	New install script for deploying Collabora Online with WebUI credentials and allowed-domain configuration.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[acknologia]

Hi Robert,

I appreciate you help in creating installation scripts for more applications.
When you feel that these scripts are no longer in progress would you be able to make a post on the custom install scripts section of the hexos forums for them?

I would also appreciate it if you could also message me in the hexos forums with any feedback or concerns or if there is anything I can help you with.

[rhjanssen]

I've send you a message 👍.

[SimJoSt]

I am getting a warning saying, that https needs to be wrapped in double quotes. Removing the 2 instances of https from the quoted descriptions, fixes it.
Probably, more a HexOS issue, than from this script.

[rhjanssen]

These scripts work on my server, but maybe the phrasing should be adjusted.