Nextcloud Will Not Show OnlyOffice In iFrame

[mhfowler]

Describe the bug

nextcloud will not show onlyoffice document in iframe

Context

• Hardware: Lenove Thinkcentre
• YunoHost version: 11.3.0.2
• I have access to my server: yes
• Are you in a special context or did you perform some particular tweaking on your YunoHost instance?: I route my internet traffic to my homeserver through a VPN. But HTTPS and other things are working for other apps, just not this one
  • If yes, please explain:
• Using, or trying to install package version/branch: Nextcloud: 29.0.4ynh2, OnlyOffice 8.1.1ynh1

Steps to reproduce

After installing nextcloud (which is working fine), I installed OnlyOffice, and tried to do the integration. I set the secret key and all appeared to work. I can even see the option to create XLSX and other document types in nextcloud now.

However, when I go to the document, for example curriculum.xlsx, I see an error that my Nextcloud cannot communicate with oo.commoninternet.net (the domain of only office). Maybe this is an iframe issue? How do I resolve this?

If I go to the url of onlyoffice directly, it works fine and has proper https. Both nextcloud and onlyoffice are working independently, but together they are not working because of this error via the screenshot below.

I also tried changing the domain of onlyoffice to be a subdomain of nextcloud and that did not help either (nextcloud at nc.commoninternet.net and onlyoffice at oo.nc.commoninternet.net)

[mhfowler]

indeed, when I added the firefox "Ignore X-Frame-Options" extension, and ignored my domains, then it works.

but still wondering how to make it work for others without the extension?

[looowizz]

A bit late but, hm weird. The only thing i would think of is to double check you inputted the the correct domain of your nextcloud instance when installing onlyoffice?

It should then automatically allow Nextcloud to communicate to it due to this line:

onlyoffice_ynh/conf/nginx.conf

Line 16 in 7f3c711

more_set_headers "X-Frame-Options : ALLOW-FROM https://__NEXTCLOUDDOMAIN__ always";