From e0b1d3accc90d3f446125f8438f7dcc5b2c6e87b Mon Sep 17 00:00:00 2001 From: raul Date: Thu, 3 Nov 2022 17:00:13 +0100 Subject: [PATCH] Add secure-view settings documentation Signed-off-by: raul --- admin_manual/office/configuration.rst | 26 +++++++++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/admin_manual/office/configuration.rst b/admin_manual/office/configuration.rst index 5514676dd..e1a6dbb37 100644 --- a/admin_manual/office/configuration.rst +++ b/admin_manual/office/configuration.rst @@ -59,4 +59,28 @@ When you install coolwsd package, the post-install script will look for addition .. seealso:: - https://sdk.collaboraonline.com/docs/installation/Fonts.html \ No newline at end of file + https://sdk.collaboraonline.com/docs/installation/Fonts.html + + +Secure view settings +******************** + +The secure view settings enables Nextcloud to embed watermarks on your office files. The watermark may be set according to different rules: + +- **Tags:** will watermark files for files containing the defined tags +- **Groups:** will watermark files when opened by users belonging to the defined groups. +- **All shares:** will watermark files accessed via a share. +- **Read-only shares:** will watermark files if they are accessed via a read-only share. + +.. warning:: + To enforce the confidentiality of your files it is crucial to restrict the ability to download the documents. + + This includes ensuring that your `WOPI configuration <#wopi-settings>`_ is configured to only serve documents between Nextcloud and Collabora. + + +Wopi settings +************* + +It is highly recommended to restrict WOPI requests to the IP addresses of the Collabora servers that are expected to request files from the Nextcloud installation. This can be done by setting the ``Allow list for WOPI requests`` option from the Office admin settings. + +Similarly, it is advised to configure `Collabora's WOPI host configuration `_ to only serve IPs from expected hosts.