HTTP Proxy

Sometimes it’s handy to use a http proxy like nginx or apache to forward requests to an internal server or Docker container running GroupOffice. If you do this then you need to set these headers to make GroupOffice operate properly:

X-Forwarded-Proto : http or https. This is the protocol the proxy server uses.
X-Forwarded-Host : The hostname of the proxy server.

See for more information:

504 Gateway Time-out

Some requests to GroupOffice live for a long time:

sse.php: Used for server sent events to update changes with a push notification. It lives for 120s
Microsoft-Server-ActiveSync, For synchronising mobile devices. It may live up to 3600s.

In your Apache Proxy configuration you could use:

ProxyTimeout 1800

Nginx with Docker example

Here’s an example for nginx with docker.

server {
    listen 443 ssl;
    server_name groupoffice.example.com;

    ssl_certificate /etc/letsencrypt/live/groupoffice.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/groupoffice.example.com/privkey.pem;

    # for large file uploads
    client_max_body_size 5G;

     location / {
         proxy_pass http://localhost:9090;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto https;
     }
}

Apache2 with PHP FPM example

<VirtualHost *:443>

    <Directory /usr/share/groupoffice/www>
   Options -Indexes +FollowSymLinks
   AllowOverride None

   #Enable for apache 2.4
   Require all granted
 </Directory>

ServerName groupoffice.example.com
DocumentRoot /usr/share/groupoffice

ErrorLog /var/log/apache2/groupoffice_error.log
CustomLog /var/log/apache2/groupoffice_access.log combined

SSLEngine On
    SSLCertificateKeyFile /etc/letsencrypt/live/groupoffice.example.com/privkey.pem
    SSLCertificateFile /etc/letsencrypt/live/groupoffice.example.com/fullchain.pem

Alias /Microsoft-Server-ActiveSync /usr/share/groupoffice/www/modules/z-push/index.php
Alias /caldav /usr/share/groupoffice/www/modules/caldav/calendar.php
Alias /carddav /usr/share/groupoffice/www/modules/carddav/addressbook.php
Alias /webdav /usr/share/groupoffice/www/modules/dav/files.php
Alias /wopi /usr/share/groupoffice/www/go/modules/business/wopi/wopi.php
Alias /onlyoffice /usr/share/groupoffice/www/go/modules/business/onlyoffice/connector.php

#autoconfig
Alias /mail/config-v1.1.xml /usr/share/groupoffice/go/modules/community/autoconfig/autoconfig.php
Alias /v1.1/mail/config-v1.1.xml /usr/share/groupoffice/go/modules/community/autoconfig/autoconfig.php
Alias /.well-known/autoconfig/mail/config-v1.1.xml /usr/share/groupoffice/go/modules/community/autoconfig/autoconfig.php

#autodiscover
#  Alias /autodiscover/autodiscover.json /usr/share/groupoffice/go/modules/community/autoconfig/autodiscover-json.php
Alias /Autodiscover/Autodiscover.xml /usr/share/groupoffice/go/modules/community/autoconfig/autodiscover.php
Alias /autodiscover/autodiscover.xml /usr/share/groupoffice/go/modules/community/autoconfig/autodiscover.php

#openID service discovery
Alias /.well-known/openid-configuration /usr/share/groupoffice/api/oauth.php/.well-known/openid-configuration


#PHP-FPM proxy config

# Increased timeout for long running requests (sse, activesync)
ProxyTimeout 1800

# flushpackets is required for SSE to work
ProxyPassMatch "^/sse.php.*$" "fcgi://localhost" flushpackets=on

#Pass authorization header
SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

# For apache2 + php-fpm. This is required to make PUT request with chunked transfer encoding work. MacOS Finder
# uses this to upload with WebDAV.
SetEnv proxy-sendcl 1

<FilesMatch \.php$>
    # For Apache version 2.4.10 and above, use SetHandler to run PHP as a fastCGI process server
    SetHandler "proxy:unix:/run/php/php8.4-fpm.sock|fcgi://localhost"
</FilesMatch>

#End PHP-FPM proxy config
</VirtualHost>