hosts/flora-6/caddy.nix

@@ -126,6 +126,14 @@
           reverse_proxy :18507
         '';
       };
+      "collabora.pub.solar" = {
+        logFormat = lib.mkForce ''
+          output discard
+        '';
+        extraConfig = ''
+          reverse_proxy :9980
+        '';
+      };
       "obs-portal.pub.solar" = {
         logFormat = lib.mkForce ''
           output discard

hosts/flora-6/collabora.nix

@@ -0,0 +1,38 @@
+{
+  config,
+  lib,
+  pkgs,
+  self,
+  ...
+}: {
+
+  virtualisation = {
+    docker = {
+      enable = true; # sadly podman is not supported rightnow
+      extraOptions = ''
+        --data-root /data/docker
+      '';
+    };
+
+    oci-containers = {
+      backend = "docker";
+      containers."collabora" = {
+        image = "collabora/code";
+        autoStart = true;
+        ports = [
+          "9980:9980"
+        ];
+        extraOptions = [
+          "--cap-add MKNOD"
+        ];
+        environment = {
+          server_name = "collabora.pub.solar";
+          aliasgroup1 = "https://collabora.pub.solar:443";
+          DONT_GEN_SSL_CERT = "1";
+          extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
+          SLEEPFORDEBUGGER = "0";
+        };
+      };
+    };
+  };
+}

hosts/flora-6/flora-6.nix

@@ -21,6 +21,7 @@ in {
     ./gitea.nix
     ./mailman.nix
     ./owncast.nix
+    ./collabora.nix
 
     profiles.base-user
     profiles.users.root # make sure to configure ssh keys