Problem with Collabora with extern Traefik

[seagullki]

OC works fine, but if i click a .odt file:

Collabora Online cannot establish a WebSocket connection, resulting in a 400 Bad Request error.
The WebSocket URL being constructed is malformed: wss://collabora.DOMAIN.TLD/cool/https://wopiserver.DOMAIN.TLD/wopi/files/...

Some Ideas?

The relevant parts in my config-file:

----- .env -----

COMPOSE_FILE=docker-compose.yml:weboffice/collabora.yml:external-proxy/opencloud-exposed.yml:external-proxy/collabora-exposed.yml

## OpenCloud Settings ##
OC_DOMAIN=oc.DOMAIN.TLD


## Default Enabled Services ##

### Collabora Settings ###
COLLABORA_DOMAIN=collabora.DOMAIN.TLD
WOPISERVER_DOMAIN=wopiserver.DOMAIN.TLD
COLLABORA_SSL_ENABLE=false
COLLABORA_SSL_VERIFICATION=false
COLLABORA_HOME_MODE=true

----- Traefik dynamic.yml -----

tls:
  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true
      cipherSuites:
        - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
        - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
        - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
        - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
        - "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305"
        - "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"

http:
  middlewares:
    secureHeaders:
      headers:
        browserXssFilter: true
        contentTypeNosniff: true
        frameDeny: true
        sslRedirect: true
        # HSTS Configuration
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: "SAMEORIGIN"

    localOnly:
      ipWhiteList:
        sourceRange:
          - "127.0.0.1/32"
          - "172.0.0.1/8"
          - "10.54.0.0/24"
          - "10.54.10.0/24"
          - "10.54.11.0/24"
          - "10.54.20.0/24"
          - "10.54.99.0/24"
          - "192.168.3.1/24"
          - "192.168.4.1/24"

    https-redirect:
      redirectScheme:
        scheme: https
        permanent: true


  routers:

    opencloud:
      service: opencloud
      rule: "Host(`oc.DOMAIN.TLD`)"
      entryPoints:
        - http
        - https
      middlewares:
        - https-redirect
        - secureHeaders
      tls:
        certResolver: letsencrypt

    collabora:
      service: collabora
      rule: "Host(`collabora.DOMAIN.TLD`)"
      entryPoints:
        - https
      middlewares:
        - secureHeaders
      tls:
        certResolver: letsencrypt

    wopiserver:
      service: wopiserver
      rule: "Host(`wopiserver.DOMAIN.TLD`)"
      entryPoints:
        - https
      middlewares:
        - secureHeaders
      tls:
        certResolver: letsencrypt


  services:

    opencloud:
      loadBalancer:
        servers:
          - url: http://10.54.20.21:9200

    collabora:
      loadBalancer:
        servers:
          - url: http://10.54.20.21:9980

    wopiserver:
      loadBalancer:
        servers:
          - url: http://10.54.20.21:9300

[seesteins]

This is a Collabora isssue. There's guidance from the Collabora team on how to fix this here.

You need to set the extra params environment variable on the Collabora container to include "--o:hexify_embedded_urls=true"

For example mine looks like this: extra_params="--o:ssl.enable=false --o:ssl.ssl_verification=false --o:ssl.termination=true --o:welcome.enable=false --o:allowframe=true --o:net.frame_ancestors=https://cloud.example.com --o:hexify_embedded_urls=true"