# Docker configuration of WOPI Host failes

**URL:** <https://forum.collaboraonline.com/t/docker-configuration-of-wopi-host-failes/3812>\
**Category:** Installation & Configuration\
**Created:** [June 27, 2025, 6:39pm UTC](https://forum.collaboraonline.com/t/docker-configuration-of-wopi-host-failes/3812 "2025-06-27T18:39:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rmkl](https://avatars.discourse-cdn.com/v4/letter/r/b38774/32.png) [@rmkl](https://forum.collaboraonline.com/u/rmkl)\
**Post date:** [June 27, 2025, 6:39pm UTC](https://forum.collaboraonline.com/t/docker-configuration-of-wopi-host-failes/3812/1 "2025-06-27T18:39:33Z")

</div>

Hi  
I am currently stuck at setting up CollaboraOnline that keeps showing “Unauthorized WOPI Host” error message.

I run Owncloud Infinite Scale and want to support CollaboraOnline by following the deployment example here: [ocis/deployments/examples/ocis\_full/collabora.yml at master · owncloud/ocis · GitHub](https://github.com/owncloud/ocis/blob/master/deployments/examples/ocis_full/collabora.yml) . In contrast to this example I use nginx as reverse proxy and updated to the latest CODE version.

I am trying to debug and find out, that /etc/coolwsd/coolwsd.xml does not contain my owncloud address at all - in fact it looks like no aliasgroup was added. The environment variable within the running container exists and is as expected (when running echo within the running container).

My docker config for collabora/CODE looks like this:

```auto
  collabora:
    image: collabora/code:25.04.3.1.1
    networks:
      internal:
    environment:
      aliasgroup1: "https://oc.mydomain.tld:443,https://oc\\.mydomain\\.tld:443" # enable for aliasgroup1
      DONT_GEN_SSL_CERT: "YES"
      extra_params: |
        --o:ssl.enable=false \
        --o:ssl.ssl_verification=false \
        --o:ssl.termination=true \
        --o:welcome.enable=false \
        --o:net.frame_ancestors=oc.mydomain.tld
      username: admin
      password: tochange
    cap_add:
      - MKNOD
    logging:
      driver: local
    restart: always
    entrypoint: ['/bin/bash', '-c']
    command: ['coolconfig generate-proof-key && /start-collabora-online.sh']
    healthcheck:
      test: ["CMD", "bash", "-c", "exec 3<>/dev/tcp/127.0.0.1/9980 && echo -e 'GET /hosting/discovery HTTP/1.1\r\nHost: localhost:9980\r\n\r\n' >&3 && head -n 1 <&3 | grep '200 OK'"]

```

I found some strange errors and warnings in the logs but could not find a solution (exempt):

```auto
[forkit] WRN The systemplate directory [/opt/cool/systemplate] is read-only, and at least [/opt/cool/systemplate//etc/passwd] is out-of-date. Will have to clone dynamic elements of systemplate to the jails. To restore optimal performance, make sure the files in [/opt/cool/systemplate/etc] are up-to-date.| common/JailUtil.cpp:586
[kit_spare_002] ERR Failed to get the realpath of [/opt/cool/child-roots/1-a06c2ea0/tmp/sharedpresets/template] (ENOENT: No such file or directory)| common/FileUtil-unix.cpp:63
[kit_spare_002] ERR linkOrCopy: nftw() failed for '/opt/cool/child-roots/1-a06c2ea0/tmp/sharedpresets/template'| kit/Kit.cpp:612
[websrv_poll] ERR #30: Read failed, have 1 buffered bytes (ECONNRESET: Connection reset by peer)| net/Socket.hpp:1462
[websrv_poll] WRN #30: Socket still open post onDisconnect(), forced shutdown.| net/Socket.hpp:1270

```

BTW, admin panel is available, discovery as well, curl works from collabora to owncloud and vice versa.

Any help is appreciated!  
Thanks a lot!

---

<div class="post-metadata">

**Author:** ![rmkl](https://avatars.discourse-cdn.com/v4/letter/r/b38774/32.png) [@rmkl](https://forum.collaboraonline.com/u/rmkl)\
**Post date:** [June 29, 2025, 2:41pm UTC](https://forum.collaboraonline.com/t/docker-configuration-of-wopi-host-failes/3812/2 "2025-06-29T14:41:58Z")

</div>

Finally, it works for me:

```auto
  collabora:
    image: collabora/code:25.04.3.1.1
    # release notes: https://www.collaboraonline.com/release-notes/
    networks:
      internal:
    environment:
      aliasgroup1: "https://oc.mydomain.tld:443,https://oc\\.mydomain\\.tld:443"
      aliasgroup2: "http://collaboration:9300"
      DONT_GEN_SSL_CERT: "YES"
      extra_params: |
        --o:ssl.enable=false \
        --o:ssl.ssl_verification=false \
        --o:ssl.termination=true \
        --o:welcome.enable=false \
        --o:net.frame_ancestors=oc.mydomain.tdl \ 
      username: admin
      password: redacted

    cap_add:
      - MKNOD
    logging:
      driver: local
    restart: always
    entrypoint: ['/bin/bash', '-c']
    command: ['coolconfig generate-proof-key && /start-collabora-online.sh']
    healthcheck:
      test: ["CMD", "bash", "-c", "exec 3<>/dev/tcp/127.0.0.1/9980 && echo -e 'GET /hosting/discovery HTTP/1.1\r\nHost: localhost:9980\r\n\r\n' >&3 && head -n 1 <&3 | grep '200 OK'"]

```

I believe the error was in the config of OCIS, where I set the COLLABORATION\_JWT\_SECRET as requested in a release note (I think for OCIS 7.0.0). Without it works perfectly.  
The errors and warnings mentioned in the initial post are still there, unfortunately.  
Thanks anybody for thinking and reading.

---

<div class="post-metadata">

**Author:** ![darshan](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/darshan/32/2230_2.png) [@darshan](https://forum.collaboraonline.com/u/darshan)\
**Post date:** [June 30, 2025, 6:32am UTC](https://forum.collaboraonline.com/t/docker-configuration-of-wopi-host-failes/3812/3 "2025-06-30T06:32:01Z")

</div>