diff -Nur --no-dereference smeserver-onlyoffice-0.0.5.old/root/etc/e-smith/db/configuration/migrate/50onlyoffice smeserver-onlyoffice-0.0.5/root/etc/e-smith/db/configuration/migrate/50onlyoffice --- smeserver-onlyoffice-0.0.5.old/root/etc/e-smith/db/configuration/migrate/50onlyoffice 2022-06-23 21:21:31.000000000 -0400 +++ smeserver-onlyoffice-0.0.5/root/etc/e-smith/db/configuration/migrate/50onlyoffice 2022-11-21 00:10:15.610000000 -0500 @@ -1,6 +1,7 @@ { my $onlyoffice = $DB->get('onlyoffice') || $DB->new_record('onlyoffice', {type => 'configuration'}); my $token = $onlyoffice->prop('token') || ''; + my $secretString = $onlyoffice->prop('secretString') || ''; # If the management interface is already defined, return nothing if ($token eq '') { @@ -9,6 +10,13 @@ $onlyoffice->set_prop('token',"$pass"); } + if ($secretString eq '') { + # Else, we generate a random password + my $pass=`/usr/bin/openssl rand -base64 60 | tr -c -d '[:alnum:]'`; + $onlyoffice->set_prop('secretString',"$pass"); + } + + #dbpass my $dbpass = $onlyoffice->prop('dbpass') || ''; if ($dbpass eq '') { diff -Nur --no-dereference smeserver-onlyoffice-0.0.5.old/root/etc/e-smith/events/actions/smeserver-onlyoffice-conf smeserver-onlyoffice-0.0.5/root/etc/e-smith/events/actions/smeserver-onlyoffice-conf --- smeserver-onlyoffice-0.0.5.old/root/etc/e-smith/events/actions/smeserver-onlyoffice-conf 2022-07-06 00:05:44.000000000 -0400 +++ smeserver-onlyoffice-0.0.5/root/etc/e-smith/events/actions/smeserver-onlyoffice-conf 2022-11-21 00:10:39.660000000 -0500 @@ -10,7 +10,7 @@ export fqdn=$(/sbin/e-smith/config getprop onlyoffice VirtualHost || echo `config get SystemName`.`config get DomainName`) export dshost=$fqdn export dsport=$(/sbin/e-smith/config getprop onlyoffice TCPPort || echo "8082") - +secretString=$(/sbin/e-smith/config getprop onlyoffice secretString || /usr/bin/openssl rand -base64 60 | tr -c -d '[:alnum:]' ) fulladdress="$dshost:$dsport" [ $(/sbin/e-smith/config getprop onlyoffice VirtualHost) ] && fulladdress=$(/sbin/e-smith/config getprop onlyoffice VirtualHost) @@ -93,6 +93,8 @@ # Allow unauthorized SSL if enabled jq -r ".services.CoAuthoring.requestDefaults.rejectUnauthorized = ${REJECT_UNAUTHORIZED}" $DEFAULT_CONFIG > temp.json && mv -f temp.json $DEFAULT_CONFIG +#add very secret string https://forum.onlyoffice.com/t/onlyoffice-7-2-secure-link-secret-error/2806/4 +jq -r ".storage.fs.secretString = \"${secretString}\"" $DEFAULT_CONFIG > temp.json && mv -f temp.json $DEFAULT_CONFIG # configure nextcloud if [ -f /usr/share/nextcloud/occ ]; then # check if nextcloud is installed diff -Nur --no-dereference smeserver-onlyoffice-0.0.5.old/root/etc/e-smith/templates/etc/nginx/conf.d/ds.conf/10base smeserver-onlyoffice-0.0.5/root/etc/e-smith/templates/etc/nginx/conf.d/ds.conf/10base --- smeserver-onlyoffice-0.0.5.old/root/etc/e-smith/templates/etc/nginx/conf.d/ds.conf/10base 2022-07-05 23:25:04.000000000 -0400 +++ smeserver-onlyoffice-0.0.5/root/etc/e-smith/templates/etc/nginx/conf.d/ds.conf/10base 2022-11-21 00:09:18.851000000 -0500 @@ -43,7 +43,7 @@ ## sudo openssl dhparam -out dhparam.pem 4096 ## # ssl_dhparam /etc/ssl/certs/dhparam.pem; - + set $secure_link_secret { $onlyoffice{'secretString'} || "how-to-configure-ocsp-stapling-on-apache" }; include /etc/nginx/includes/ds-*.conf; \}