[решено] nginx, nextcloud, onlyoffice

[nitelam]

Добрый день,

Ubuntu 22
Nginx reverse proxy 192.168.108.200
Nextcloud 26.0.1.1 192.168.108.201
Onlyoffice document server 7.3.3-49 192.168.108.202

брандмауэры не установлены

Nextcloud работает по https, все хорошо

1. проблема
Onlyoffice document server при открытии по https и нажатии на кнопку Go to test, далее открываем любой документ выходит сообщение: The document could not be saved. Download failed. По http, открывалось отлично.

2. При интеграции в nextcloud сервера onlyoffice по https выходит сообщение
При попытке соединения возникла ошибка (cURL error 7: Failed to connect to onlyoffice.zs**.ru
port 443 after 18 ms: Connection refused (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://onlyoffice.zs**.ru/healthcheck)
порт действительно закрыт на сервере onlyoffice, там дефолтная конфигурация nginx, но если все идет через nginx 192.168.108.200, нужно все равно открывать и сертификаты там ставить?

Конфигурации двух отдельных сайтов с сервера nginx:
1. onlyoffice.conf
server {
listen 80;
listen [::]:80;
server_name onlyoffice.zs**.ru;

return 301 https://$host$request_uri;
}

server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name onlyoffice.zs**.ru;

ssl_certificate /etc/letsencrypt/live/onlyoffice.zs**.ru/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/onlyoffice.zs**.ru/privkey.pem;

location / {
proxy_pass http://192.168.108.202/; (http://linuxshop.ru/go/?link=http://192.168.108.202/;)
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

# These lines make sure that OnlyOffice can communicate with Nextcloud
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-Ssl on;
proxy_set_header X-Url-Scheme $scheme;
proxy_buffering off;

# This line makes sure that OnlyOffice can communicate with Nextcloud
add_header 'Access-Control-Allow-Origin' '*';

# Proxy timeouts
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
send_timeout 600;
}
}


2. nextcloud.conf
server {
server_name cloud1.zs**.ru;
location / {
proxy_pass http://192.168.108.201; (http://linuxshop.ru/go/?link=http://192.168.108.201;)
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
rewrite ^/.well-known/carddav /remote.php/dav/ permanent;
rewrite ^/.well-known/caldav /remote.php/dav/ permanent;
}

listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/cloud1.zs**.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/cloud1.zs**.ru/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
}
server {
if ($host = cloud1.zs**.ru) {
return 301 https://$host$request_uri;
} # managed by Certbot


listen 80;
server_name cloud1.zs**.ru;
return 404; # managed by Certbot
}