search

CollaboraOnline / online

Collabora Online is a collaborative online office suite based on LibreOffice technology. This is also the source for the Collabora Office apps for iOS and Android.
https://collaboraonline.com
Other
1.85k stars 701 forks source link

"Document loading failed" - NGINX, no Docker #4966

Closed natrius closed 2 years ago

natrius commented 2 years ago

Describe the bug Updated from Ubuntu 18.04 to 20.04 and now run into quite some problems with collabora.

Details: Ubuntu 20.04 LTS NGINX 1.18 PHP 8.1.7 Nextcloud 24.0.2 Richdocuments 6.1.0

Nextcloud shows me in the "Office" Tab that it is connected to the Collabora server. grafik

Its just, when i try to open a file it waits for some time and ends in "Document loading failed". Log in Nextcloud itself does not show anything for the time when trying to open a file.

Logs #### Nextcloud log (data/nextcloud.log) ``` sudo tail data/nextcloud.log did not show anything in the timeframe i tried to access the file. ``` Here is the nginx. I had to switch https to http so it works or the coolwsb service would even start at all. ``` server { listen 443 ssl; server_name office.example.home; ssl_certificate /etc/letsencrypt/live/office.example.home/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/office.example.home/privkey.pem; # managed by Certbot # static files location ^~ /browser { proxy_pass http://127.0.0.1:9980; proxy_set_header Host $http_host; } # WOPI discovery URL location ^~ /hosting/discovery { proxy_pass http://127.0.0.1:9980; proxy_set_header Host $http_host; } # Capabilities location ^~ /hosting/capabilities { proxy_pass http://127.0.0.1:9980; proxy_set_header Host $http_host; } # main websocket location ~ ^/cool/(.*)/ws$ { proxy_pass http://127.0.0.1:9980; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header Host $http_host; proxy_read_timeout 36000s; } # download, presentation and image upload location ~ ^/(c|l)ool { proxy_pass http://127.0.0.1:9980; proxy_set_header Host $http_host; } # Admin Console websocket location ^~ /cool/adminws { proxy_pass http://localhost:9980; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header Host $http_host; proxy_read_timeout 36000s; } add_header Strict-Transport-Security "max-age=31536000" always; # managed by Certbot ssl_trusted_certificate /etc/letsencrypt/live/office.example.home/chain.pem; # managed by Certbot ssl_stapling on; # managed by Certbot ssl_stapling_verify on; # managed by Certbot } ```

When using the nginx from here https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html with the https instead of the http i'm using i will get the following error with sudo journalctl -eu coolwsd: ERR Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373

So currently i use it with http instead of https and its OK in the Nextcloud Office Check, but the documents do not open. In this issue tracker i found https://github.com/CollaboraOnline/online/issues/4828 but i obviously don't have a 

 location ^~ / {
     proxy_pass http://192.162.172.100:9980;
     proxy_set_header Host $http_host;
   }

in my config.

Both are working, but the admin-UI does not show anything when i'm trying to connect or open a file, even when setting the log-settings to "debug".

It seems this exact issue is splattered all over the internet, Nextcloud Forum, Reddit selfhosted, nextcloud/richdocuments Github-Issues, this Issue tracker. It may be worth collection various stuff to check for this and collect it together in the documentation? I used an old installation and updated finally, it was nowhere mentioned everything changed from lool to cool - a member of the nextcloud-chat i'm in mentioned this.

EDIT: Just to be sure - i posted already https://github.com/nextcloud/richdocuments/issues/2287 because i didn't get that this is an separate tracker. This one might be better suited? (The CollaboraOnline/online one)

Rash419 commented 2 years ago

@natrius thanks for the report. Can you give us coolwsd logs ? Can you share command with which you start the CODE ?

natrius commented 2 years ago

Okay, right now I'm using the

14:44 i tried to open a file on nextcloud, result in Nextcloud grafik

I'm currently using the nginx from https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html but edited through certbot automatically. /etc/nginx/conf.d/office.server.com.conf looks the following currently

server {
    server_name office.example.server;

    error_log /var/log/nginx/collabora.error;

   # static files
    location ^~ /browser {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }
    location ^~ /loleaflet {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # WOPI discovery URL
    location ^~ /hosting/discovery {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # Capabilities
    location ^~ /hosting/capabilities {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # main websocket
    location ~ ^/cool/(.*)/ws$ {
        proxy_pass http://localhost:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }

    # download, presentation and image upload
    location ~ ^/(c|l)ool {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # Admin Console websocket
    location ^~ /cool/adminws {
        proxy_pass http://localhost:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/office.example.server-0001/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/office.example.server-0001/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

    add_header Strict-Transport-Security "max-age=31536000" always; # managed by Certbot

    ssl_trusted_certificate /etc/letsencrypt/live/office.example.server-0001/chain.pem; # managed by Certbot
    ssl_stapling on; # managed by Certbot
    ssl_stapling_verify on; # managed by Certbot

}
server {
    if ($host = office.example.server) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    listen 80;
    listen [::]:80;
    server_name office.example.server;

    error_log /var/log/nginx/collabora.error;

   # static files
    location ^~ /browser {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }
    location ^~ /loleaflet {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # WOPI discovery URL
    location ^~ /hosting/discovery {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # Capabilities
    location ^~ /hosting/capabilities {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # main websocket
    location ~ ^/cool/(.*)/ws$ {
        proxy_pass http://localhost:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }

    # download, presentation and image upload
    location ~ ^/(c|l)ool {
        proxy_pass http://localhost:9980;
        proxy_set_header Host $http_host;
    }

    # Admin Console websocket
    location ^~ /cool/adminws {
        proxy_pass http://localhost:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }

}

sudo journalctl -eu coolwsd result:

Jun 30 12:52:10 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:10.784224 +0200 [ websrv_poll ] ERR  Unknown resource: /system_api.php G, host: 173.249.47.61:9980, path: 1
Jun 30 12:52:10 server.contaboserver.net coolwsd[28517]: [0] 'system_api.php'
Jun 30 12:52:10 server.contaboserver.net coolwsd[28517]: full URI: /system_api.php| wsd/COOLWSD.cpp:3529
Jun 30 12:52:11 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:11.106744 +0200 [ websrv_poll ] ERR  Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373
Jun 30 12:52:12 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:12.555030 +0200 [ websrv_poll ] ERR  Unknown resource: /c/version.js G, host: 173.249.47.61:9980, path: 2
Jun 30 12:52:12 server.contaboserver.net coolwsd[28517]: [0] 'c'
Jun 30 12:52:12 server.contaboserver.net coolwsd[28517]: [1] 'version.js'
Jun 30 12:52:12 server.contaboserver.net coolwsd[28517]: full URI: /c/version.js| wsd/COOLWSD.cpp:3529
Jun 30 12:52:12 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:12.872990 +0200 [ websrv_poll ] ERR  Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373
Jun 30 12:52:14 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:14.305334 +0200 [ websrv_poll ] ERR  Unknown resource: /streaming/clients_live.php G, host: 173.249.47.61:9980, path: 2
Jun 30 12:52:14 server.contaboserver.net coolwsd[28517]: [0] 'streaming'
Jun 30 12:52:14 server.contaboserver.net coolwsd[28517]: [1] 'clients_live.php'
Jun 30 12:52:14 server.contaboserver.net coolwsd[28517]: full URI: /streaming/clients_live.php| wsd/COOLWSD.cpp:3529
Jun 30 12:52:14 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:14.629117 +0200 [ websrv_poll ] ERR  Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373
Jun 30 12:52:16 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:16.076230 +0200 [ websrv_poll ] ERR  Unknown resource: /stalker_portal/c/version.js G, host: 173.249.47.61:9980, path: 3
Jun 30 12:52:16 server.contaboserver.net coolwsd[28517]: [0] 'stalker_portal'
Jun 30 12:52:16 server.contaboserver.net coolwsd[28517]: [1] 'c'
Jun 30 12:52:16 server.contaboserver.net coolwsd[28517]: [2] 'version.js'
Jun 30 12:52:16 server.contaboserver.net coolwsd[28517]: full URI: /stalker_portal/c/version.js| wsd/COOLWSD.cpp:3529
Jun 30 12:52:16 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:16.396576 +0200 [ websrv_poll ] ERR  Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373
Jun 30 12:52:17 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:17.836514 +0200 [ websrv_poll ] ERR  Unknown resource: /stream/live.php G, host: 173.249.47.61:9980, path: 2
Jun 30 12:52:17 server.contaboserver.net coolwsd[28517]: [0] 'stream'
Jun 30 12:52:17 server.contaboserver.net coolwsd[28517]: [1] 'live.php'
Jun 30 12:52:17 server.contaboserver.net coolwsd[28517]: full URI: /stream/live.php| wsd/COOLWSD.cpp:3529
Jun 30 12:52:18 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:18.155285 +0200 [ websrv_poll ] ERR  Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373
Jun 30 12:52:19 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:19.590427 +0200 [ websrv_poll ] ERR  Unknown resource: /flu/403.html G, host: 173.249.47.61:9980, path: 2
Jun 30 12:52:19 server.contaboserver.net coolwsd[28517]: [0] 'flu'
Jun 30 12:52:19 server.contaboserver.net coolwsd[28517]: [1] '403.html'
Jun 30 12:52:19 server.contaboserver.net coolwsd[28517]: full URI: /flu/403.html| wsd/COOLWSD.cpp:3529
Jun 30 12:52:19 server.contaboserver.net coolwsd[28517]: wsd-28517-28546 2022-06-30 12:52:19.907793 +0200 [ websrv_poll ] ERR  Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373
Jun 30 14:25:19 server.contaboserver.net coolwsd[28517]: wsd-28517-28517 2022-06-30 14:25:19.955229 +0200 [ coolwsd ] WRN  Waking up dead poll thread [update], started: false, finished: false| net/Socket.hpp:722

So nothing.

sudo tail data/nextcloud.log results are (looks a bit better)

{"reqId":"Lnd2xFzRf63LPlFuaZT6","level":1,"time":"2022-06-30T13:55:27+02:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"hitting https://rueckgr.at/wienerlinien/disruptions/rss.xml","userAgent":"--","version":"24.0.2.1"}
{"reqId":"Lnd2xFzRf63LPlFuaZT6","level":1,"time":"2022-06-30T13:55:27+02:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"the stream is modified, parsing it","userAgent":"--","version":"24.0.2.1"}
{"reqId":"Lnd2xFzRf63LPlFuaZT6","level":1,"time":"2022-06-30T13:55:27+02:00","remoteAddr":"","user":"--","app":"news","method":"","url":"--","message":"correct public id for node Wiener Linien -- Aktuelle St\u00f6rungen","userAgent":"--","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}
{"reqId":"gKm1DcJNY16zeRacr2Oa","level":1,"time":"2022-06-30T14:44:23+02:00","remoteAddr":"1.2.3.4","user":"Administrator","app":"no app in context","method":"GET","url":"/apps/files/","message":"Deprecated event type for OCA\\Files::loadAdditionalScripts: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0","version":"24.0.2.1"}

I'm not trying stuff now in order not to change something unexpected.

And

Can you share command with which you start the CODE ?

Don't know what you mean with that. Like sudo systemctl restart coolwsd.service?

s1m-e0n commented 2 years ago

I am also experiencing this, same setup as natrius (though with Docker), and I have had this problem for a while now also with older Nextcloud and Richdocuments versions. I could get document loading to work though when setting "Enable HTTPS-Only Mode in all windows" in Firefox. I am also getting the error in the Nextcloud mobile apps.

natrius commented 2 years ago

Right now i found /etc/cron.weekly/collabora_certs to still look like its old with lool instead of cool

#!/bin/bash
cp /etc/letsencrypt/live/kraw.eu/cert.pem /etc/loolwsd/cert.pem
cp /etc/letsencrypt/live/kraw.eu/privkey.pem  /etc/loolwsd/key.pem
cp /etc/letsencrypt/live/kraw.eu/chain.pem /etc/loolwsd/ca-chain.cert.pem
chown lool /etc/loolwsd/cert.pem
chown lool /etc/loolwsd/key.pem
chown lool /etc/loolwsd/ca-chain.cert.pem
systemctl restart loolwsd.service
exit 0

I changed it to cool and restarted the server, as expected no change - unfortunately. Still "Document failed to load".

Rash419 commented 2 years ago

@natrius Can you share <wopi>...</wopi>config part from coolwsd.xml ?

Rash419 commented 2 years ago

I am also experiencing this, same setup as natrius (though with Docker), and I have had this problem for a while now also with older Nextcloud and Richdocuments versions. I could get document loading to work though when setting "Enable HTTPS-Only Mode in all windows" in Firefox. I am also getting the error in the Nextcloud mobile apps.

@s1m-e0n which CODE version you are using ?can you share docker command to start the CODE?

s1m-e0n commented 2 years ago

@Rash419 CODE version is 22.05.3.1 but also had the problem on earlier versions. I'm using the official docker image from https://hub.docker.com/r/collabora/code/, which uses https://github.com/CollaboraOnline/online/blob/master/docker/from-packages/scripts/start-collabora-online.sh in CMD

Here's my docker-compose.yml, if that's any help

version: "3.7"

networks:
  internal:
    driver: bridge

services:
  collabora:
    image: collabora/code
    restart: unless-stopped
    networks:
      - internal
    environment:
      - "extra_params=--o:ssl.enable=false"
    cap_add:
      - MKNOD
    logging:
      driver: journald
      options:
        tag: docker-nextcloud-collabora
Rash419 commented 2 years ago

@natrius ERR Looks like SSL/TLS traffic on plain http port| wsd/COOLWSD.cpp:3373 can you share config.php ?

natrius commented 2 years ago

So, the /etc/coolwsd/coolwsd.xml as followed

<wopi allow="true" desc="Allow/deny wopi storage.">
                        <max_file_size desc="Maximum document size in bytes to load. 0 for unlimited." type="uint">0</max_file_size>
                        <locking desc="Locking settings">
                                <refresh default="900" desc="How frequently we should re-acquire a lock with the storage server, in seconds (default 15 mins) or 0 for no refresh" type="int">900</refresh>
                        </locking>
                        <alias_groups desc="default mode is 'first' it allows only the first host when groups are not defined. set mode to 'groups' and define group to allow multiple host and its aliases" mode="groups">
                                <group>
                                        <host allow="true">https://nextcloud.example.home</host>
                                </group>
                                <!-- If you need to use multiple wopi hosts, please change the mode to "groups" and
                    add the hosts below.  If one host is accessible under multiple ip addresses
                    or names, add them as aliases. -->
                                <!--<group>
                    <host desc="hostname to allow or deny." allow="true">scheme://hostname:port</host>
                    <alias desc="regex pattern of aliasname">scheme://aliasname1:port</alias>
                    <alias desc="regex pattern of aliasname">scheme://aliasname2:port</alias>
            </group>-->
                                <!-- More "group"s possible here -->
                        </alias_groups>
                        <host>nextcloud.example.home</host>
                </wopi>

and the /var/www/nextcloud/config/config.php

<?php
$CONFIG = array (
  'instanceid' => 'anId',
  'passwordsalt' => 'AnPasswordalt',
  'secret' => 'ANiceSecret',
  'trusted_domains' =>
  array (
    0 => 'nextcloud.example.home',
  ),
  'datadirectory' => '/var/www/nextcloud/data',
  'dbtype' => 'mysql',
  'version' => '24.0.3.2',
  'overwrite.cli.url' => 'https://nextcloud.example.home',
  'dbname' => 'nextcloud_db',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud_db_user',
  'dbpassword' => 'DBPASSWORD',
  'installed' => true,
  'maintenance' => false,
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'overwriteprotocol' => 'https',
  'logtimezone' => 'Europe/Berlin',
  'theme' => '',
  'loglevel' => 1,
  'app_install_overwrite' =>
  array (
    0 => 'calendar',
    1 => 'forms',
    2 => 'souvenirs',
    3 => 'flowupload',
  ),
  'mail_from_address' => 'kraw',
  'mail_smtpmode' => 'smtp',
  'mail_sendmailmode' => 'smtp',
  'mail_domain' => 'email.eu',
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpauth' => 1,
  'mail_smtpname' => 'user@email.eu',
  'mail_smtppassword' => 'wassswoooorrrd',
  'mail_smtphost' => 'email.eu',
  'mail_smtpsecure' => 'ssl',
  'mail_smtpport' => '465',
  'default_phone_region' => 'AT',
  'updater.secret' => 'UpdaterSecret',
);

If thats what you mean @Rash419 (i hope i left no password...)

Rash419 commented 2 years ago

@natrius I think its ssl thing only can you try using having nextcloud and code without ssl make sure you configure overwritehost and overwriterhost parameters correctly https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/reverse_proxy_configuration.html#overwrite-parameters

natrius commented 2 years ago

It seems i have solved it. I got in there with a fresh mind and tried to check it step by step: https://www.collaboraoffice.com/code-4/linux-packages/

and i think due to the distribution update from 20.04 to 22.04 the /etc/apt/sources.list.d/collaboraonline.sources was still wrong and due to that nothing worked. Suddenly i was now also able to use the nginx config i used in my first post (https://github.com/CollaboraOnline/online/issues/4966#issue-1289753523) - with the correct https (like in the documentation) instead of the (wrong) http - reminder, the result was nextcloud stating collabora was connected but the document still not loading.

I hope you can refer to others to this issue.

Thats all i have written down for now. If there are questions, feel free to ask.