Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
FREEDOM251

Freedom251 › Blog › Apache

How to self-host an office suite with Nextcloud and Collabora

By Freedom251 Team · · 9 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To self-host collaborative documents in Nextcloud, run Collabora Online as a separate document-editing service (or install the built-in CODE app), then connect it through Nextcloud Office. A production-style deployment normally uses a Docker-capable host, an HTTPS hostname such as office.example.com, valid certificates for both hostnames, and a reverse proxy that forwards Collabora’s browser, discovery, capability, and WebSocket routes.

Nextcloud and Collabora are cooperating services, not one combined server. Once the Collabora endpoint is reachable, install the Nextcloud Office app and enter that endpoint under Administration settings → Office.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Nextcloud Office and Collabora actually are

Nextcloud provides the files, accounts, sharing rules, and web interface. Collabora Online provides the browser-based editing engine. In a dedicated installation, Nextcloud sends document-editing requests to a Collabora service running alongside the Nextcloud web stack; users continue opening files from Nextcloud.

Be careful with version-specific terminology. The current Nextcloud 35 manual identifies Euro-Office as the default Nextcloud Office solution and says that it requires a Euro-Office Document Server. Collabora Online is presented as a fully supported alternative based on CODE (Collabora Online Development Edition), available either as a self-hosted service or through a built-in app. Both backends support common DOC/DOCX, PPT/PPTX, XLS/XLSX, and OpenDocument formats.

#1 Best Overall
Sale
GMKtec G3S Mini PC Intel N95 Processor (Up to 3.4GHz) 8GB RAM 256GB M.2 SSD | Mini Desktop Computer with VESA Mount for Office Home Business HTPC Proxmox, Dual 4K Display, WiFi 5, Gigabit Ethernet
  • 12th Intel Alder Lake N95 Processor – The GMKtec G3 S Mini PC is powered by the 12th Gen Intel N95 processor with 4 cores, 4 threads, 6MB cache and a burst frequency up to 3.4GHz. Compared with N100/N5105/N5100/N5095, the N95 delivers up to 36% overall performance improvement. Perfect for routine tasks, office work, and home entertainment, this compact mini desktop is more convenient than traditional bulky PCs.
  • 8GB RAM & 256GB SSD Storage – Pre-installed with 8GB DDR4 memory and a fast 256GB M.2 2242 SSD, the G3 S mini desktop offers quicker startup, smoother multitasking, and faster file transfers. Enjoy seamless performance whether you’re working on multiple applications, browsing, or streaming content.
  • Rich Interfaces & Connectivity – The G3 S mini computer comes equipped with USB 3.2 (up to 10Gbps), dual HDMI 2.0 (4K@60Hz), and a 3.5mm audio jack. With support for WiFi 5, Bluetooth 5.0, and Gigabit Ethernet (RJ45 1000MbE), it connects easily with monitors, projectors, printers, office equipment, and other peripherals, making it versatile for both home and business use.
  • Dual 4K Display Support – Featuring upgraded Intel UHD Graphics (up to 1000MHz), the G3 S supports 4K video playback and AV1 decoding for a smooth viewing experience. With dual HDMI outputs, you can connect two 4K@60Hz displays simultaneously, enabling efficient multitasking for work and entertainment.
  • GMKTEC WARRANTY - GMKtec offers a 3-year limited warranty (1 year replacement + 2 years parts replacement) for each mini PC, starting from the date of the purchase effective on all sales starting Oct. 2026. All defects due to design and workmanship are covered. With a professional after sales team always ready to attend to your needs, you can simply relax and enjoy your mini PC

The Nextcloud Office app is the connector in Nextcloud. It is not the Collabora document server itself. You must either provide a Collabora endpoint or install the built-in CODE option before the connector can open documents.

Choose the deployment that fits your workload

Nextcloud documents four broad routes. The easiest route is not automatically the fastest, and a dedicated server adds networking work that the built-in option avoids.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Deployment Best fit Trade-off
Built-in CODE app Personal use or a small team that wants the fewest setup steps Nextcloud describes it as slower than a standalone installation and says it lacks advanced scalability features
Dedicated Docker service Administrators comfortable operating containers, DNS, TLS, and a reverse proxy Requires a separate office hostname, certificates, service networking, and proxy rules
Distribution packages Administrators who prefer the operating system’s package manager You operate and update Collabora directly on the host
Nextcloud All In One Readers choosing Nextcloud’s integrated deployment approach Confirm the current AIO configuration and included components for the exact version you run

There is no universal resource size, price, or concurrency number established by the documentation for every workload. If the built-in server becomes sluggish or you need more scalability controls, move the document service to a dedicated installation rather than assuming a larger Nextcloud web container will solve it.

Prerequisites for a dedicated Collabora service

The documented Docker example targets a recent Ubuntu or Debian host running Apache. Before starting, make sure all of these conditions are true:

  • A machine that can run Docker and keep the Collabora container available.
  • A public DNS name for Nextcloud, already working over HTTPS.
  • A separate DNS name for Collabora, commonly office.example.com, resolving to the server or reverse proxy that will receive office traffic.
  • Valid TLS certificates for both the Nextcloud hostname and the Collabora hostname.
  • An Apache reverse proxy with the modules required by the Collabora example. nginx, Caddy, Traefik, and other proxies need their own equivalent Collabora configuration.
  • The Nextcloud hostname that Collabora is allowed to trust in its alias configuration.

A home server or mini PC can provide the Docker host, but the documentation does not specify a required model or performance threshold. Treat hardware choice as an infrastructure decision based on your users and other services, not as a mandatory product purchase.

Deploy Collabora with Docker

1. Verify Nextcloud before adding the office service

Open the public Nextcloud URL from a browser and confirm that login, file access, and HTTPS work. Fix certificate, DNS, or proxy problems on the Nextcloud side first. Collabora must be able to identify the same public Nextcloud hostname that users and the proxy expose.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Create and verify the office hostname

Create a DNS record such as office.example.com pointing to the server or edge proxy that will accept Collabora traffic. Test that the name resolves from the networks where users will edit documents. If DNS points at a different proxy than Nextcloud, ensure that proxy can forward the office routes to the Docker host.

Rank #2
Dell OptiPlex 7050 Micro Computer, Intel Quad Core i5-6500T up to 3.1GHz, 16G DDR4, 256G SSD, Windows 11 Pro 64 Bit (Renewed)
  • This Certified Refurbished product is tested and certified to look and work like new. The refurbishing process includes functionality testing, basic cleaning, inspection, and repackaging. The product ships with all relevant accessories, a minimum 90-day warranty, and may arrive in a generic box. Only select sellers who maintain a high-performance bar may offer Certified Refurbished products on Amazon.com.
  • Dell OptiPlex 7050 Micro Computer, Intel Quad Core i5-6500T up to 3.1GHz, 16G DDR4, 256G SSD.
  • Includes: USB Keyboard & Mouse, Microsoft office 30 days free trail.
  • Ports: 1 x RJ-45, 1 x HDMI, 1 x DP, 6 x USB 3.0.
  • 4K Support: Support 4K (3840x2160) Dual display, makes it easy to connect two monitors at the same time, and you can expand working Windows, mirror content, or expand a single window across multiple monitors.

3. Obtain certificates for both names

Install a certificate valid for the Nextcloud hostname and another valid for the office hostname, or use a certificate that legitimately covers both. Browsers and Nextcloud must be able to validate the complete certificate chain. An HTTP-only office endpoint is not the documented production arrangement.

4. Start the Collabora CODE container

The official example uses the collabora/code image, publishes container port 9980 only on the host loopback interface, and allows the Nextcloud host through an aliasgroup1 setting. Binding to loopback keeps the container behind the reverse proxy rather than exposing its unencrypted service port directly to the Internet.

docker pull collabora/code
docker run -d 
  --name collabora-code 
  --restart unless-stopped 
  -p 127.0.0.1:9980:9980 
  -e 'aliasgroup1=https://cloud.example.com:443' 
  collabora/code

Use your real Nextcloud hostname in the alias value. This is an illustrative form of the documented pattern; check the current Collabora release documentation for image options, allowed-host syntax, and update guidance before deploying it unchanged. Do not expose port 9980 publicly when the reverse proxy is intended to terminate HTTPS.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Put Apache in front of the container

The documented example terminates HTTPS at Apache and forwards the Collabora service on localhost. Its proxy configuration must cover all of the paths Collabora and the browser use:

  • /browser for browser-side assets.
  • /hosting/discovery for WOPI discovery.
  • /hosting/capabilities for capability information.
  • WebSocket traffic under /cool.
  • The main /cool endpoint.
  • A compatibility mapping for /lool used by older integrations or routes.

Enable the Apache proxy and WebSocket modules required by the current example, create an HTTPS virtual host for office.example.com, and proxy those paths to http://127.0.0.1:9980. Keep the proxy rules together with the certificate configuration for the office virtual host. The exact directives vary with Apache version and your existing virtual-host layout; copying an Apache recipe into nginx or another proxy will not work without translating the routes and WebSocket handling.

After reloading Apache, visit the office hostname over HTTPS and inspect the proxy logs. A reachable landing response alone does not prove that document editing works; discovery and WebSocket requests must also pass.

6. Connect Nextcloud to Collabora

  1. Sign in to Nextcloud as an administrator.
  2. Open Apps and install or enable Nextcloud Office.
  3. Go to Administration settings → Office.
  4. Choose the option to use a Collabora Online server and enter the public HTTPS URL, for example https://office.example.com.
  5. Save the setting, then open a supported DOCX, XLSX, PPTX, or ODF file from a test account.

Use the public office URL in the setting, not the container’s loopback address. Nextcloud and users must reach the same HTTPS endpoint that the reverse proxy publishes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
BOSGAME E5 11 Pro Mini PC, AMD Ryzen 5300U 4C/ 8T, Business Home Office PC | 8GB DDR4 256GB M.2 2280 SSD, 2.5 GbE Dual Lan Desktop Computers, Triple Displays 4K 60Hz, Wi-Fi 5, BT 5.0, Support Linux SSH
  • 【AMD Ryzen 3 5300U CPU: Outperforms N150 & 3500U】 BOSGAME E5 mini PC is powered by the TSMC 7nm FinFET architecture AMD Ryzen 3 5300U processor (4 Cores, 8 Threads, up to 3.8GHz boost, 6MB total cache). Compared to low-end Intel N150 or 3500U chips which only have 4 single threads and throttle under load, the 5300U delivers over 30% faster multi-core speed. Run 30+ browser tabs, large Excel sheets, and Zoom meetings simultaneously without system lag.
  • 【8GB DDR4 RAM & 256GB NVMe SSD Storage】 Installed with high-speed 8GB DDR4 dual-channel memory and a fast 256GB M.2 2280 SSD, eliminating slow boot times and application loading delays. To accommodate growing data requirements, the upgradeable hardware design features dual SODIMM slots that allow you to expand memory up to 64GB RAM, ensuring smooth operation during heavy multitasking.
  • 【High-Capacity Dual M.2 SSD Storage Expansion】 Never worry about running out of space for your business files. In addition to the pre-installed 256GB system drive, the motherboard houses an extra empty internal M.2 2280 NVMe PCIe 3.0 slot. This allows you to easily add a second solid-state drive for up to an additional 2TB of storage capacity (upgrades not included) without needing to remove or reinstall the original operating system.
  • 【Radeon 6-Core Graphics & Triple 4K Displays】 Integrated with official AMD Radeon Graphics (6 Graphics Cores, 1500 MHz frequency) for casual gaming, photo editing, and crisp 4K media decoding. Featuring 1x HDMI 2.0 port, 1x DisplayPort, and 1x Full-Function Type-C port, the E5 outputs true 4K@60Hz resolution to three monitors at once. This multi-screen setup eliminates constant window-switching for traders, programmers, and office workers.
  • 【Dual 2.5GbE LAN Ports for Advanced Networking】 Experience fast wired network transmission speeds up to 2500Mbps without lagging or buffering. The integration of dual 2.5 Gigabit Ethernet ports (powered by Realtek RTL8125 controller) makes this compact computer an exceptional hardware choice for tech enthusiasts. Easily configure it into software routers, hardware firewalls (pfSense, OpnSense), home NAS servers, or local homelabs.

How the request flows

A useful way to diagnose this stack is to follow one edit session. The browser loads the file interface from Nextcloud. Nextcloud’s Office connector consults Collabora’s discovery and capability endpoints, then establishes the editing session through the Collabora routes. The reverse proxy terminates TLS and forwards ordinary HTTP requests and WebSocket traffic to the container on port 9980. Collabora checks that the requesting Nextcloud host is in its allowed alias configuration.

This explains why several apparently unrelated settings matter together: a correct DNS record with a broken WebSocket route still fails; a working WebSocket route with a certificate-name mismatch still fails; and a healthy Collabora container that does not allow your Nextcloud hostname may load a page but refuse to edit.

Built-in CODE: the simpler alternative

For personal use or a small team, Nextcloud’s built-in CODE app can avoid a separate Docker service and much of the proxy wiring. Install the relevant app from Nextcloud’s app administration, follow the version-specific setup prompts, and test editing with a non-administrator account.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The convenience has a documented cost: Nextcloud says the built-in server is slower than a standalone installation and does not include advanced scalability features. If simultaneous editing or larger files causes unacceptable delays, use a dedicated Collabora service. Do not describe the built-in app and a dedicated container as the same deployment; they have different networking, update, and performance characteristics.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Operating and updating the service

Container updates

The example uses the floating collabora/code image tag. The documented update pattern is to pull the image again and replace the running container. Before doing so, read the current Collabora release notes and Nextcloud compatibility guidance, record your existing environment and proxy settings, and schedule a maintenance window.

docker pull collabora/code
docker stop collabora-code
docker rm collabora-code
# Recreate the container with the same allowed-host and port settings

The documentation does not establish a universal stable-tag or pinning policy. In a production environment, choose an update policy deliberately: track a tested version, retain a rollback image, and test opening and editing each supported file type after an upgrade.

Certificates, DNS, and proxy changes

Renew certificates before they expire and verify that the office hostname still resolves to the intended proxy. After changing Apache rules, test discovery, capabilities, a new editing session, and a live edit that crosses the WebSocket connection. Keep the Collabora container private behind the proxy unless your architecture explicitly requires another exposure model.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
KAMRUI Pinova P2 Mini PC 16GB RAM 512GB SSD, AMD Ryzen 4300U(Beats 5400U/3500U/N95,Up to 3.7GHz,4C/8T) Mini Computers,Triple 4K Display/HDMI+DP+Type-C/WiFi/BT for Home/Business Mini Desktop Computers
  • 【AMD Ryzen 4300U True 4-Core CPU: Outperforms N95 & i3-10110U】KAMRUI P2 Mini PC is equipped with true 4-core AMD Ryzen 4300U processor built on advanced 7nm Zen2 architecture,This means you get consistent, unthrottled performance for hours on end, whether you’re running multiple browser tabs, streaming 4K content, or managing virtual machines. Compare that to Intel N95 (4 efficiency cores that throttle under load) or Intel i3-10110U (only 2 cores total), and the difference is night and day: The KAMRUI P2 AMD Ryzen 4300U (28W) is 40% faster than the Intel i3-10110U and 25% faster than the Intel N95 in multi-core tasks, ensuring smooth, lag-free performance even during heavy workloads.
  • 【Integrated AMD Radeon Graphics: 2.5X Stronger for Tri 4K】The KAMRUI P2 AMD 4300U Mini PC have unlocked the full potential of the built-in AMD Radeon Vega 5 graphics with 28W power delivery, making it 2.5 times stronger than the Intel UHD graphics found in the N95 and i3-10110U. This means you can enjoy Tri 4K@60Hz displays without a single stutter, perfect for productivity setups, home theaters, or even light photo/video editing and casual gaming. While the Intel N95/i3-10110U struggle to run a single 4K display without lag, The KAMRUI AMD 4300U Mini PC handles Tri 4K effortlessly, turning your workspace into a high-efficiency hub or your living room into a premium entertainment center.
  • 【Large Storage Capacity, Easy Expansion】KAMRUI Pinova P2 mini computers is equipped with 16GB LPDDR4 for faster multitasking and smooth application switching. 512GB M.2 SSD ensures fast startup, fast file transfers and plenty of storage space,eliminating slow loading times and ensuring fast responsiveness. the two storage slots (1x M.2 2280 SATA/NVMe PCIe3.0 slot, 1x M.2 2280 SATA slot) can be combined to provide up to 4TB of total storage(Not included). This gives you enough space for all your projects, media and data.
  • 【4K Triple Display】KAMRUI Pinova P2 4300U mini desktop computers is equipped with HDMI2.0 ×1 +DP1.4 ×1+USB3.2 Gen2 Type-C ×1 interfaces for faster transmission, Triple 4K@60Hz Display, KAMRUI P2 mini computer is ideal for visual home entertainment, home office, conference rooms, etc. USB3.2 Gen2 Type-A port ×2 with a transfer speed of up to 10 Gbps (21 times faster than USB 2.0) for efficient data transfer. Ideal for seamless multitasking between spreadsheets, browsers and presentations, or for an immersive entertainment experience.
  • 【USB3.2 Gen2 Type-C 10Gbps, Versatile connectivity】KAMRUI P2 mini desktop pc fast and versatile connectivity! The USB3.2 Gen2 Type-C port offers a data transfer rate of 10Gbps and simultaneously supports DisplayPort 1.4 video output. The P2 AMD Ryzen 4300U Mini PC is complemented by Gigabit LAN, WiFi and Bluetooth, so nothing stands in the way of a productive working environment.

Backups and recovery boundaries

Nextcloud remains the system of record for stored files and its database. Collabora is the editing service, so rebuilding its container should not replace your Nextcloud file and database backup plan. Preserve the container’s deployment parameters, alias configuration, proxy virtual host, and certificate renewal configuration so the service can be recreated consistently.

Troubleshoot failures by symptom

Nextcloud says it cannot connect to Collabora

  • Confirm that the URL under Administration settings → Office is the public HTTPS office hostname, not 127.0.0.1, a Docker service name, or an HTTP URL.
  • Resolve the office hostname from a client network and confirm that the certificate name and chain are valid.
  • Check that Apache forwards /hosting/discovery, /hosting/capabilities, and /browser.
  • Review Collabora and proxy logs for TLS, DNS, or upstream-connection errors.

The Collabora page opens, but a document will not edit

  • Check WebSocket forwarding under /cool; a normal HTTP response does not prove that the upgrade request reaches the container.
  • Confirm that the Nextcloud hostname is present in the container’s aliasgroup1 configuration and uses the correct scheme and hostname.
  • Verify the compatibility /lool mapping if an older client or integration still requests it.
  • Open a fresh session after correcting the proxy or alias setting; an already-failed browser tab can retain stale connection state.

Editing is too slow with one-click CODE

Nextcloud characterizes the built-in option as slower and less scalable than a standalone installation. Move to a dedicated Collabora service and give it its own container and proxy path. The documentation does not provide a universal CPU, memory, or user-count threshold, so measure your workload rather than applying an invented sizing rule.

An older tutorial uses different names

Check the manual matching your installed Nextcloud release. The current Nextcloud 35 guide calls the connector Nextcloud Office and identifies Euro-Office as the default backend, with Collabora Online as an alternative. Older articles may use different app names, routes, or branding and should not override the labels shown in your administration interface.

Enterprise support and package platforms

Nextcloud’s enterprise portal states that supported Collabora use requires an Enterprise Subscription with the Collabora option. Without that option, Nextcloud GmbH says it cannot provide support for Collabora installations. This is a support entitlement, not evidence that a self-hosted Collabora deployment technically requires a paid subscription.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The enterprise portal lists signed 64-bit Linux packages for Debian 11 and 12; Ubuntu 20.04, 22.04, and 24.04; RHEL/CentOS 7; RHEL/CentOS 8; RHEL 9/CentOS Stream 9; SLES 15/openSUSE Leap 15.x; and Docker. Match package instructions to the operating-system and release combination you actually run, and verify current support status before standardizing a fleet.

Pre-launch checklist

  • Nextcloud opens reliably at its public HTTPS hostname.
  • The office DNS name resolves to the intended proxy.
  • Certificates validate for both hostnames.
  • Collabora is running and its service port is reachable from the proxy.
  • The allowed-host or aliasgroup1 setting contains the exact Nextcloud hostname.
  • Apache (or your chosen proxy) forwards browser assets, discovery, capabilities, WebSocket traffic under /cool, the main /cool route, and the /lool compatibility path where required.
  • The Nextcloud Office app is enabled and points to the public Collabora URL.
  • A test user can open and save DOCX, XLSX, PPTX, and ODF files.
  • You have recorded how to renew certificates, update the container, and roll back a failed update.

Which route should you use?

Use built-in CODE when ease of installation matters most and your personal or small-team workload is modest. Use a dedicated Collabora service when you need better performance, clearer service isolation, or room to scale and you are prepared to operate DNS, TLS, a reverse proxy, and container updates. Use distribution packages when host-level package management is your preferred operating model, and evaluate All In One against the exact Nextcloud version and components you intend to run.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

ApacheCollabora OnlineDockerNextcloudNextcloud Officeself-hostingWebSockets

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.