From 4c9fddee423ad0a3c1f16e0af6f9272e36c364c4 Mon Sep 17 00:00:00 2001
From: Menno van Leeuwen <menno@vleeuwen.me>
Date: Mon, 17 Mar 2025 15:54:49 +0100
Subject: [PATCH] feat: update Caddyfile for OnlyOffice reverse proxy and
 disable WOPI in Docker Compose

---
 config/ansible/tasks/servers/services/caddy/Caddyfile.j2 | 9 +++++++--
 .../tasks/servers/services/seafile/docker-compose.yml.j2 | 1 +
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/config/ansible/tasks/servers/services/caddy/Caddyfile.j2 b/config/ansible/tasks/servers/services/caddy/Caddyfile.j2
index 3ee90b7..652fbb3 100644
--- a/config/ansible/tasks/servers/services/caddy/Caddyfile.j2
+++ b/config/ansible/tasks/servers/services/caddy/Caddyfile.j2
@@ -28,7 +28,12 @@ sf.mvl.sh {
     tls {{ caddy_email }}
 }
 
-sf.mvl.sh:6233 {
-    reverse_proxy onlyoffice:6233
+of.mvl.sh {
+    reverse_proxy onlyoffice:80 {
+        header_up Host {host}
+        header_up X-Real-IP {remote}
+        header_up X-Forwarded-For {remote}
+        header_up X-Forwarded-Proto {scheme}
+    }
     tls {{ caddy_email }}
 }
diff --git a/config/ansible/tasks/servers/services/seafile/docker-compose.yml.j2 b/config/ansible/tasks/servers/services/seafile/docker-compose.yml.j2
index ea9a0fc..77c7a27 100644
--- a/config/ansible/tasks/servers/services/seafile/docker-compose.yml.j2
+++ b/config/ansible/tasks/servers/services/seafile/docker-compose.yml.j2
@@ -74,6 +74,7 @@ services:
     environment:
       - JWT_ENABLED=true
       - JWT_SECRET={{ jwt_private_key | default('') }}
+      - WOPI_ENABLED=false
     volumes:
       - {{ seafile_data_dir }}/onlyoffice/logs:/var/log/onlyoffice
       - {{ seafile_data_dir }}/onlyoffice/data:/var/www/onlyoffice/Data