Enabling SSL prevents connect to Workspace server

Workspace
1

Hi

I have an SSL issue, have newly installed ONLYOFFICE_Workspace_Win 24.12, changed settings in Control panel to

Document editing addr: ds-vpath
Document service addr for req. from Community server: https://myserver.local:8083/
Community server addr for req. from Document server: https://myserver.local/

and copied ds-ssl.conf.tmpl to ds.conf (added my crt & key into),
so ds.conf now looks as shown below.

But now I can open only https://myserver.local/welcome
Trying to open smth like https://myserver.local/controlpanel/backup Control Panel says:
Cannot GET /controlpanel/backup

Or Cannot GET /ds-vpath
(Console: Failed to load resource: the server responded with a status of 404 (Not Found)

What have I missed and what have to be done?

Thank you.

include includes/http-common.conf;

## Normal HTTP host
server {
  listen 0.0.0.0:80;
  listen [::]:80 default_server;
  server_name _;
  server_tokens off;
  set $secure_link_secret e8mymMnNsALzrBYfbIt2;

  ## Redirects all traffic to the HTTPS host
  root /nowhere; ## root doesn't have to be a valid path since we are redirecting
  rewrite ^ https://$host$request_uri? permanent;
}

#HTTP host for internal services
server {
  listen 127.0.0.1:80;
  listen [::1]:80;
  server_name localhost;
  server_tokens off;
  set $secure_link_secret e8mymMnNsALzrBYfbIt2;
  
  include includes/ds-common.conf;
  include includes/ds-docservice.conf;
}

## HTTPS host
server {
  listen 0.0.0.0:443 ssl;
  listen [::]:443 ssl default_server;
  server_tokens off;
  set $secure_link_secret e8mymMnNsALzrBYfbIt2;
  root /usr/share/nginx/html;

  ssl_certificate "C:\\Program Files (x86)\\Ascensio System SIA\\DocumentServer\\nginx\\certificates\\local.cer";
  ssl_certificate_key "C:\\Program Files (x86)\\Ascensio System SIA\\DocumentServer\\nginx\\certificates\\local.key";
  ssl_verify_client off;

  ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";

  ssl_protocols TLSv1.2;
  ssl_session_cache  builtin:1000  shared:SSL:10m;

  ssl_prefer_server_ciphers   on;

  add_header Strict-Transport-Security max-age=31536000;
  # add_header X-Frame-Options SAMEORIGIN;
  add_header X-Content-Type-Options nosniff;

  include includes/ds-*.conf;
}

(at the end I’ve run secrets updater .bat)

2

Hello @derkontakt

Please specify which guide was followed to enable HTTPS in Workspace. Also specify the OS and its version of the server where Workspace is installed.

3

Hello @Constantine

I repeated this guide step-by-step - Switching ONLYOFFICE Docs for Windows to HTTPS protocol

The OS is Windows Server 2019.

I also tried to find some relevant logs (e.g. nginx) but can’t find this “GET” in any of docs- or -community server logs (cause I suspected some http/https mixed content).

–
Respectfully
Luka

4

Linked guide switches only Document Server to HTTPS. To switch Workspace (all components) to HTTPS please refer to this guide:

1 Like