Set-OPS-Public/roles/serveur_nextcloud/tasks/collabora.yml

---
# L'APPLICATION VIENT DU DEPOT DU SITE, PLUS DE L'APP STORE (2026-10-08) : `app_tierce.yml`.
- name: Installer l'app richdocuments (depot du site, somme, signature, activation)
  ansible.builtin.include_tasks: app_tierce.yml
  vars:
    serveur_nextcloud_app_id: richdocuments

- name: Collabora / Office (occ, en www-data avec TLS PG)
  become: true
  become_user: "{{ serveur_nextcloud_utilisateur }}"
  environment:
    PGSSLMODE: "{{ serveur_nextcloud_pg_sslmode }}"
    PGSSLROOTCERT: "{{ serveur_nextcloud_ca_racine }}"
  when: not ansible_check_mode
  block:
    - name: URL serveur -> Collabora (locale, rapide)
      ansible.builtin.command:
        argv: ["php", "{{ serveur_nextcloud_racine }}/occ", "config:app:set", "richdocuments", "wopi_url", "--value={{ serveur_nextcloud_wopi_url }}"]
      changed_when: false

    - name: Valider la configuration WOPI (autodetection)
      ansible.builtin.command:
        argv: ["php", "{{ serveur_nextcloud_racine }}/occ", "richdocuments:activate-config"]
      changed_when: false

    # Gotcha : public_wopi_url APRES activate-config (qui l'ecrase). Navigateur -> edge.
    - name: URL navigateur -> Collabora (publique, via edge)
      ansible.builtin.command:
        argv:
          - php
          - "{{ serveur_nextcloud_racine }}/occ"
          - config:app:set
          - richdocuments
          - public_wopi_url
          - "--value={{ serveur_nextcloud_wopi_public_url }}"
      changed_when: false