Collabora problem with Podman rootless Quadlet

[sca-git]

Description

I'm having trouble integrating Collabora Online with OpenCloud when using rootless Podman and systemd Quadlet containers. The problem is that the Collabora editor does not appear when trying to edit a file. The interface just doesn’t load the editor frame.

I've tried accessing it both through a reverse proxy (with npm - Nginx Proxy Manager) and directly via local network access — same problem

I have based my setup on the official docker-compose.yml provided by OpenCloud. It's possible that I made a mistake during the conversion to systemd Quadlet units, or that I missed a configuration detail.

Setup and container configuration

I'm running three rootless Podman containers using systemd Quadlet.

opencloud.container

[Unit]
Description=Container OpenCloud

[Container]
ContainerName=opencloud
Image=docker.io/opencloudeu/opencloud-rolling:latest
Network=opencloud.network
PublishPort=9200:9200
Volume=%h/opencloud/config:/etc/opencloud
Volume=%h/opencloud/data:/var/lib/opencloud 

Entrypoint=/bin/sh
Exec=-c "opencloud init || true; opencloud server"

Environment=OC_URL=https://opencloud.xxx.com
Environment=OC_INSECURE=false
Environment=ADRESSE_HTTP_PROXY=0.0.0.0:9200
Environment=START_ADDITIONAL_SERVICES=notifications
Environment=OC_LOG_LEVEL=info
Environment=OC_LOG_COLOR=true
Environment=OC_LOG_PRETTY=true
Environment=PROXY_CPS_CONFIG_FILE_LOCATION=/etc/opencloud/cps.yaml

# Collabora
Environment=COLLABORA_DOMAIN=collabora.xxx.com
Environment=NATS_NATS_HOST=0.0.0.0
Environment=GATEWAY_GRPC_ADDR=0.0.0.0:9142
Environment=FRONTEND_APP_HANDLER_SECURE_VIEW_APP_ADDR=eu.opencloud.api.collaboration.CollaboraOnline
Environment=GRAPH_AVAILABLE_ROLES=b1e2218d-eef8-4d4c-b82d-0f1a1b48f3b5,a8d5fe5e-96e3-418d-825b-534dbdf22b99,...

[Install]
WantedBy=default.target

collabora.container

[Unit]
Description= Conteneur Collabora
Requires=opencloud.container
After=opencloud.container

[Container]
ContainerName=collabora
Image=docker.io/collabora/code:latest
Network=opencloud.network
HostName=collabora
PublishPort=9980:9980

Entrypoint=/bin/sh
Exec=-c "coolconfig generate-proof-key && /start-collabora-online.sh"

AddCapability=MKNOD
Environment=aliasgroup1=https://collaboration.xxx.com:443
Environment=DONT_GEN_SSL_CERT=YES
Environment=extra_params=--o:ssl.enable=false --o:ssl.ssl_verification=false --o:ssl.termination=true --o:welcome.enable=true --o:net.frame_ancestors=opencloud.xxx.com
Environment=username=admin
Environment=password=admin

[Install]
WantedBy=default.target

collaboration.container

[Unit]
Description= Conteneur OpenCloud
Requires=opencloud.container
Requires=collabora.container
After=collabora.container

[Container]
ContainerName=collaboration
Image=docker.io/opencloudeu/opencloud-rolling:latest
Network=opencloud.network
HostName=collaboration
PublishPort=9300:9300
Volume=%h/opencloud/config:/etc/opencloud

Entrypoint=/bin/sh
Exec=-c "opencloud collaboration server"

Environment=COLLABORATION_GRPC_ADDR=0.0.0.0:9301
Environment=COLLABORATION_HTTP_ADDR=0.0.0.0:9300
Environment=MICRO_REGISTRY=nats-js-kv
Environment=MICRO_REGISTRY_ADDRESS=opencloud:9233
Environment=COLLABORATION_WOPI_SRC=https://collaboration.xxx.com
Environment=COLLABORATION_APP_NAME=CollaboraOnline
Environment=COLLABORATION_APP_PRODUCT=Collabora
Environment=COLLABORATION_APP_ADDR=https://collabora.xxx.com
Environment=COLLABORATION_APP_ICON=https://collabora.xxx.com/favicon.ico
Environment=COLLABORATION_APP_INSECURE=false
Environment=COLLABORATION_CS3API_DATAGATEWAY_INSECURE=false
Environment=COLLABORATION_LOG_LEVEL=info
Environment=OC_URL=https://opencloud.xxx.com

[Install]
WantedBy=default.target

All containers are on the same custom Podman network (opencloud.network) and start correctly without visible container errors.

Steps to reproduce

1. Deploy OpenCloud, Collabora, and Collaboration services via Podman Quadlet units.
2. Set up Nginx Proxy Manager (npm) with appropriate SSL certificates and forwarding.
3. Open OpenCloud instance and try to edit a document.
4. Collabora editor does not load — only a blank.

Screenshot

Is there anything obvious I’ve done wrong? Or any step I may have skipped?

Thanks for your help!

[lrdecoder]

I have this working with podman rootless quadlets, so it can work:) I am not an expert though...

One thing may be that you set --o:net.frame_ancestors=opencloud.xxx.com, while accessing it via sca-aal:9200. Does it also fail when you access it through opencloud.xxx.com? You could try (for testing, for a moment) to remove the frame ancestor setting and see if it works then.

[sca-git]

Thanks for the suggestions! I've tried accessing it via opencloud.xxx.com and even removed the --o:net.frame_ancestors setting for testing, but I'm still running into the same problem.

I also wanted to clarify that while the screenshot was taken during a local test, I'm encountering the exact same issue when using the domain name with a reverse proxy.

Since you've got this working with Podman rootless quadlets, any chance you could share an example of your Podman quadlet container configuration? That would be super helpful for me to compare and troubleshoot.

[lrdecoder]

See here: https://github.com/lrdecoder/opencloud-quadlets . I redacted the files and simplified them somewhat. For the rest, this is the setup that I am running. As I said I am not an expert, but I am happy with it so far. Hope it helps you find the problem!

[sca-git]

Hi @lrdecoder ,

Thank you so much for sharing the link to your setup! I really appreciate it. After going through your simplified quadlet container configurations, I was able to pinpoint the issue and fix the problem. Your help was invaluable, and it's working perfectly now!

You're the best – thanks again for your support!