# Docker Compose Nextcloud / Traefik / Collabora. WOPI Unauthorized, but Allow list empty **URL:** \ **Category:** Installation & Configuration\ **Created:** [July 26, 2024, 11:57am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812 "2024-07-26T11:57:25Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![dnilgreb](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dnilgreb](https://forum.collaboraonline.com/u/dnilgreb)\ **Post date:** [July 26, 2024, 11:57am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/1 "2024-07-26T11:57:25Z")
Hi, I have been running a docker compose version of Collabore CODE for a long time. I used to have my Nextcloud instance in a TrueNAS Core jail, and everything worked fine. Now, as I am moving my whole Nextcloud installation to the same docker host (still using Compose), I´ve created a new stack (using Portainer) that has everything, both Nextcloud (tag latest), Collabora (tag latest) and Traefik for a reverse proxy. Everything starts properly, certificates (one for Nextcloud, one for Collabora) get issued, the Collabora admin panel works fine, and no problems in Nextcloud. Then, I installed the Nextcloud Office app, and connected it to my Collabora, using the FQDN the Collabora cert is issued to, with SSL. It connects, turns green, and everything seems fine. But when I try to open a document in my browser, I get “WOPI Host Unauthorized error”. I have no WOPI allow list configured. That box in Nextcloud (Settings, Office) is empty. Shouldn´t it accept a connection from anywhere then? I also discovered that I cannot curl Nextcloud from my Collabora container on port 443, only port 80 works. Nextcloud container → Collabora container works fine though. In docker compose, they are on the same network. How can I make this work? What haven´t I thought of? Happy to give more specifics and details, but as I don´t know where to start, I can´t really tell what´s relevant. If anyone could point me in the right direction, that would make me happy 🙂 ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [July 29, 2024, 5:25am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/2 "2024-07-29T05:25:14Z")
hii @dnilgreb welcome to collabora forums. Interesting scenario ! Can you please try to restart the docker container and then check if CODE server is a reachable by NC or not ? - To confirm this you need check that green mark in admin settings of NC If still not working, Can you provide your XML configuration details of CODE and NC instance ? Also, if you can provide me logs so i can analyze it There is a thread in NC forum that also be helpful in your case. [Unauthorized WOPI host - #5 by randmin - 📄 Collabora - Nextcloud community](https://help.nextcloud.com/t/unauthorized-wopi-host/5089/5) Thanks, Darshan ---
**Author:** ![dnilgreb](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dnilgreb](https://forum.collaboraonline.com/u/dnilgreb)\ **Post date:** [July 29, 2024, 7:16am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/3 "2024-07-29T07:16:27Z")
> [@darshan](#): > > Can you please try to restart the docker container and then check if CODE server is a reachable by NC or not ? I have tried restarting the Nextcloud, Collabora and Traefik containers multiple times. I´ve even rebooted the docker host. From the nextcloud container curl to the Collabora container works, both protocols (http, https) From the Collabora container, curl works to the nextcloud container, but only on http. https gets error “curl: (7) Failed to connect to [cloud.example.com](http://cloud.example.com) port 443 after 1 ms: Couldn’t connect to server”. I don´t understand why. Both containers are in the same Docker network. I tried putting Collabora in its own network, but that didn´t help. > [@darshan](#): > > To confirm this you need check that green mark in admin settings of NC I do get the green mark in Nexcloud admin settings for Office in NC. > [@darshan](#): > > If still not working, Can you provide your XML configuration details of CODE and NC instance ? It´s still not working. What XML config should I post, and where would I find it? > [@darshan](#): > > Also, if you can provide me logs so i can analyze it. Absolutley. What logs should I post, and where would I find them? > [@darshan](#): > > There is a thread in NC forum that also be helpful in your case… I have seen this before. I am using docker images, and this seems to be primarily about problems when not using docker. I´ll take another look. ---
**Author:** ![dnilgreb](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dnilgreb](https://forum.collaboraonline.com/u/dnilgreb)\ **Post date:** [July 29, 2024, 7:51am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/4 "2024-07-29T07:51:25Z")
Holy smokes, I think I solved it. I found this page: [https://github.com/nextcloud/server/issues/45184](https://github.com/nextcloud/server/issues/45184) On there I found this post by someone called **jiriks74:** > The setup I used as a base had a `hostname` defined and that’s why it resolved to the container and not the proxy. I too had a hostname defined for my Nextcloud container. Once I commented that out, it worked. I can now open documents in Collabora. Next question, of course, is how to configure the WOPI host list. Any pointers as to what should be included and what shouldn´t be? ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [July 29, 2024, 8:12am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/5 "2024-07-29T08:12:01Z")
> [@dnilgreb](#): > > [[Bug]: After update to 29: Some headers are not set correctly on your instance · Issue #45184 · nextcloud/server · GitHub](https://github.com/nextcloud/server/issues/45184) > > On there I found this post by someone called **jiriks74:** > > > The setup I used as a base had a `hostname` defined and that’s why it resolved to the container and not the proxy. > > I too had a hostname defined for my Nextcloud container. Once I commented that out, it worked. I can now open documents in Collabora. @dnilgreb awesome 🎉 > [@dnilgreb](#): > > Any pointers as to what should be included and what shouldn´t be? This might help for allowed wopi host list\> [https://sdk.collaboraonline.com/docs/installation/CODE\_Docker\_image.html?highlight=wopi%20allow](https://sdk.collaboraonline.com/docs/installation/CODE_Docker_image.html?highlight=wopi%20allow) ---
**Author:** ![dnilgreb](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@dnilgreb](https://forum.collaboraonline.com/u/dnilgreb)\ **Post date:** [July 29, 2024, 8:37am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/6 "2024-07-29T08:37:11Z")
> [@darshan](#): > > This might help for allowed wopi host list\> > [Making sure you're not a bot!](https://sdk.collaboraonline.com/docs/installation/CODE_Docker_image.html?highlight=wopi%20allow) Great. Now I have it. Thanks for the help! ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [July 29, 2024, 8:38am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/7 "2024-07-29T08:38:16Z")
Your most welcome! Thanks for the report and for the solution 🙂 ---
**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\ **Post date:** [July 29, 2024, 8:38am UTC](https://forum.collaboraonline.com/t/docker-compose-nextcloud-traefik-collabora-wopi-unauthorized-but-allow-list-empty/2812/8 "2024-07-29T08:38:21Z")