# Security implications of multihost with \`-e "aliasgroup1=https://(.\*)/"\`

**URL:** <https://forum.collaboraonline.com/t/security-implications-of-multihost-with-e-aliasgroup1-https/1503>\
**Category:** Installation & Configuration\
**Created:** [December 11, 2022, 10:05pm UTC](https://forum.collaboraonline.com/t/security-implications-of-multihost-with-e-aliasgroup1-https/1503 "2022-12-11T22:05:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![thejonny](https://avatars.discourse-cdn.com/v4/letter/t/0ea827/32.png) [@thejonny](https://forum.collaboraonline.com/u/thejonny)\
**Post date:** [December 11, 2022, 10:05pm UTC](https://forum.collaboraonline.com/t/security-implications-of-multihost-with-e-aliasgroup1-https/1503/1 "2022-12-11T22:05:11Z")

</div>

In the installation manual is a section about using multiple hosts to access the CODE server.

[https://sdk.collaboraonline.com/docs/installation/Configuration.html?highlight=multi%20host#multihost-configuration](https://sdk.collaboraonline.com/docs/installation/Configuration.html?highlight=multi%20host#multihost-configuration)

Is there any problem with putting all hosts into a single aliasgroup, like that one WOPI host could access the opened files on another host?

---

<div class="post-metadata">

**Author:** ![wwe](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.collaboraonline.com/wwe/32/534_2.png) [@wwe](https://forum.collaboraonline.com/u/wwe)\
**Post date:** [December 14, 2022, 12:27pm UTC](https://forum.collaboraonline.com/t/security-implications-of-multihost-with-e-aliasgroup1-https/1503/2 "2022-12-14T12:27:12Z")

</div>

CODE server acts as WOPI client and the server which invokes the CODE is the WOPI server. Connecting multiple WOPI servers to a single CODE instance results in a situation CODE (WOPI client) has access to subset files stored on multiple servers. but there is no way one WOPI server can access files stored on another WOPI server…

Maybe this drawing clarifies which component how can access the files:

> **[\[MS-WOPI\]: Overview](https://learn.microsoft.com/en-us/openspecs/office_protocols/ms-wopi/0f0bf842-6353-49ed-91c0-c9d672f21200)**
>
> WOPI defines a set of operations that enables a client to access and change files stored by a server. This allows the client to render files and