Collabora WOPI host allow list user changes don't persist through container restarts (ie. after borgbackups and updates)

[cj-vana]

Steps to reproduce

1. Install NextCloud AIO using Portainer Stacks
2. Install all containers
3. Set Allow List for WPOI Hosts to blank or 0.0.0.0/0 in Admin Office settings.

Expected behavior

User changes to Allow list for WOPI Hosts should persist through nightly backups and updates.

Actual behavior

Allow list for WOPI Hosts reverts back to original config values. User must reset them everyday to open and edit documents.

Other information

Host OS

Ubuntu 24.04.2 LTS

Output of sudo docker info

Client: Docker Engine - Community
Version: 28.0.0
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.21.0
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.33.0
Path: /usr/libexec/docker/cli-plugins/docker-compose

Server:
Containers: 36
Running: 32
Paused: 0
Stopped: 4
Images: 29
Server Version: 28.0.0
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Using metacopy: false
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 nvidia runc
Default Runtime: runc
Init Binary: docker-init
containerd version: bcc810d6b9066471b0b6fa75f557a15a1cbf31bb
runc version: v1.2.4-0-g6c52b3f
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: builtin
cgroupns
Kernel Version: 6.8.0-53-generic
Operating System: Ubuntu 24.04.2 LTS
OSType: linux
Architecture: x86_64
CPUs: 12
Total Memory: 15.43GiB
Name: (my hostname)
ID: (my ID)
Docker Root Dir: /var/lib/docker
Debug Mode: false
Experimental: false
Insecure Registries:
::1/128
127.0.0.0/8
Live Restore Enabled: false

Docker run command or docker-compose file that you used

services:
nextcloud-aio-mastercontainer:
image: nextcloud/all-in-one:latest
init: true
restart: always
container_name: nextcloud-aio-mastercontainer
volumes:
- nextcloud_aio_mastercontainer:/mnt/docker-aio-config
- /var/run/docker.sock:/var/run/docker.sock:ro
- /dev/dri:/dev/dri
network_mode: bridge
ports:
- 8080:8080
environment:
- APACHE_PORT=11000
- APACHE_IP_BINDING=0.0.0.0
- NEXTCLOUD_DATADIR=(datadir)
- NEXTCLOUD_MOUNT=(mount)
- NEXTCLOUD_UPLOAD_LIMIT=16G
- NEXTCLOUD_MAX_TIME=3600
- NEXTCLOUD_MEMORY_LIMIT=1024M
- SKIP_DOMAIN_VALIDATION=true
- NEXTCLOUD_ENABLE_DRI_DEVICE=true
- ENABLE_NVIDIA_GPU=true
runtime: nvidia # Add NVIDIA runtime
deploy: # Add NVIDIA GPU requirements
resources:
reservations:
devices:
- driver: nvidia
count: all
capabilities: [gpu]

volumes:
nextcloud_aio_mastercontainer:
name: nextcloud_aio_mastercontainer

Other valuable info

I've tried running the command: 'docker exec -u www-data -it nextcloud-aio-nextcloud php occ config:system:set office_wopi_allowlist --value="0.0.0.0/0"' but the changes don't persist through container reboots.

[smeely]

Same issue for me

[szaimen]

Hi, adding ,0.0.0.0/0 (without removing the other values) to the end of the allowlist should usually be kept. Did you try that out already?

[cj-vana]

That did it! Thanks.