wren
104 lines
2.1 KiB
Markdown
104 lines
2.1 KiB
Markdown
# Collabora Proxy
|
||
|
||
这个目录单独承载 Collabora 反向代理，不和前后端业务代码混放。
|
||
|
||
目标：
|
||
|
||
- 把内网 Collabora `http://172.16.0.58:9980`
|
||
- 暴露成浏览器可访问的统一入口
|
||
- 供前端配置为 `http://nas.7bm.co/collabora`
|
||
|
||
## 目录说明
|
||
|
||
- `docker-compose.yml`：启动 nginx 代理容器
|
||
- `nginx.conf`：nginx 主配置
|
||
- `conf.d/collabora.conf`：Collabora 反向代理规则
|
||
- `logs/`：nginx 日志目录
|
||
|
||
## 默认代理关系
|
||
|
||
- 浏览器入口：`http://nas.7bm.co/collabora`
|
||
- 代理目标：`http://172.16.0.58:9980`
|
||
|
||
## 启动
|
||
|
||
```bash
|
||
cd /home/wren-dev/Porject/leaudit-platform/deploy/collabora-proxy
|
||
mkdir -p logs
|
||
docker compose up -d
|
||
```
|
||
|
||
## 验证
|
||
|
||
先验证代理容器：
|
||
|
||
```bash
|
||
curl http://127.0.0.1:9981/
|
||
```
|
||
|
||
应返回：
|
||
|
||
```text
|
||
collabora-proxy ok
|
||
```
|
||
|
||
再验证 Collabora 页面是否被代理出来：
|
||
|
||
```bash
|
||
curl -I http://127.0.0.1:9981/browser/dist/cool.html
|
||
```
|
||
|
||
如果这一步通了，再让上层网关或宿主 nginx 把：
|
||
|
||
- `http://nas.7bm.co/collabora`
|
||
|
||
转发到：
|
||
|
||
- `http://<部署该容器的主机>:9981/`
|
||
|
||
推荐外层 nginx：
|
||
|
||
```nginx
|
||
location /collabora/ {
|
||
proxy_pass http://127.0.0.1:9981/;
|
||
|
||
proxy_http_version 1.1;
|
||
proxy_set_header Host $http_host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
proxy_set_header X-Forwarded-Host $http_host;
|
||
proxy_set_header Upgrade $http_upgrade;
|
||
proxy_set_header Connection "upgrade";
|
||
|
||
proxy_read_timeout 3600s;
|
||
proxy_send_timeout 3600s;
|
||
proxy_connect_timeout 60s;
|
||
}
|
||
```
|
||
|
||
## 前端联动配置
|
||
|
||
代理接通后，前端 `.env` 里应改成：
|
||
|
||
```env
|
||
COLLABORA_URL=http://nas.7bm.co/collabora
|
||
APP_URL=http://nas.7bm.co:5173
|
||
DOCUMENT_URL=http://nas.7bm.co:8096/docauditai/
|
||
```
|
||
|
||
改完后重启前端：
|
||
|
||
```bash
|
||
cd /home/wren-dev/Porject/leaudit-platform/legal-platform-frontend
|
||
npm run dev:5173
|
||
```
|
||
|
||
## 运维补充
|
||
|
||
如果 Collabora 服务端启用了域名白名单、`aliasgroup` 或 WOPI 主机限制，还需要同步把：
|
||
|
||
- `nas.7bm.co`
|
||
|
||
加入允许名单，否则页面可能仍然只转圈不进文档。
|