Update to 2022-09-23 14:00

roles/onlyoffice_document_server/defaults/main.yml

@@ -19,3 +19,6 @@ oo_ds_vhost: onlyoffice-ds.{{ ansible_domain }}
 # Is auto-saving of file enabled
 # If true, files will be saved every 5 minutes
 oo_auto_save: True
+
+# Secret used to protect cached files. A random one will be generated if not set
+# oo_link_secret: XXXXXXX

roles/onlyoffice_document_server/tasks/conf.yml

@@ -8,6 +8,6 @@
   tags: oo
 
 - name: Deploy nginx configuration
-  template: src=nginx_vhost.conf.j2 dest=/etc/nginx/ansible_conf.d/32-oods.conf
+  template: src=nginx_vhost.conf.j2 dest=/etc/nginx/ansible_conf.d/32-oods.conf mode=640
   notify: reload nginx
   tags: oo

roles/onlyoffice_document_server/tasks/facts.yml

@@ -15,6 +15,16 @@
     - set_fact: oo_db_pass={{ rand_pass }}
   tags: oo
 
+- when: oo_link_secret is not defined
+  block:
+    - import_tasks: ../includes/get_rand_pass.yml
+      vars:
+        - pass_file: /etc/onlyoffice/meta/ansible_link_secret
+        - complex: False
+        - pass_size: 30
+    - set_fact: oo_link_secret={{ rand_pass }}
+  tags: oo
+
 - name: Detect installed version
   shell: rpm -q --qf "%{version}-%{release}" onlyoffice-documentserver || echo 0
   args:

roles/onlyoffice_document_server/templates/nginx_vhost.conf.j2

@@ -8,5 +8,6 @@ server {
     expires 365d;
     alias /var/www/onlyoffice/documentserver/fonts$2;
   }
+  set $secure_link_secret {{ oo_link_secret }};
   include /etc/onlyoffice/documentserver/nginx/includes/ds-docservice.conf;
 }

roles/onlyoffice_document_server/templates/oods.json.j2

@@ -4,7 +4,8 @@
   },
   "storage": {
     "fs": {
-      "folderPath": "/var/lib/onlyoffice/documentserver/App_Data/cache/files"
+      "folderPath": "/var/lib/onlyoffice/documentserver/App_Data/cache/files",
+      "secretString": "{{ oo_link_secret }}"
     }
   },
   "services": {