Shared configuration / secrets among all plugin users

AI
1

Onlyoffice Version: 8.3

OnlyOffice plugins are synchronized across all customers in a shared OnlyOffice environment, including their configurations. This means that any authorized user could potentially install arbitrary, malicious plugins that might leak confidential data or steal sensitive configurations.

If we use an LLM and want to make our configuration available to all users, how can we ensure that an arbitrary user cannot modify or delete our configuration?

d75a9684-6c74-4574-a093-3e34fabb34b8
d75a9684-6c74-4574-a093-3e34fabb34b8686×530 32.3 KB

2

Hello @ipdoc1

With latest version of Document Server and IP plugin you can define default models for the tasks from info page. Please let me know your installation type of Document Server so that I could provide proper instruction on how to enable it.

3

Docker image onlyoffice/documentserver:8.3

4

Please update your Document Server to the actual version first. Then, to enable Info Page, please refer to this guide:

  1. Get the ID of the container with Document Server by running docker ps;
  2. Connect to the running container with command docker exec -it <ID> bash;
  3. Execute nano /etc/onlyoffice/documentserver/nginx/includes/ds-docservice.conf to edit necessary config;
  4. Find following section and replace 127.0.0.1 with the IP from which you are planning to access the interface:
# Allow "/info" interface only from 127.0.0.1 by default
# Comment out lines allow 127.0.0.1; and deny all; 
# of below section to turn on the info page
location ~* ^(\/[\d]+\.[\d]+\.[\d]+[\.|-][\w]+)?\/(info)(\/.*)$ {
  allow 127.0.0.1; # Change with proper IP
  deny all;
  proxy_pass http://docservice/$2$3;
}

If you comment out both allow and deny all lines, then this page will become publicly available, which is not recommended.

  1. After setting up proper IP, save the config, close it and restart NGINX with service nginx reload to apply this change.
  2. Once done, go to https://documentserver/info to access Info Page and configure default models for all Document Server users.

That way you can add necessary AI models for the plugin globally. Users won’t be able to change them or access sensitive information, such as keys.