iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
Self-hosting ONLYOFFICE on a Linux VPS is practical when you run the official Docker image, keep the editor’s data and database on host-mounted storage, and publish it through HTTPS behind a reverse proxy. Start with at least a dual-core 2 GHz VPS, 4 GB RAM, 40 GB of free disk space, and 4 GB of swap. Increase CPU, memory headroom, storage, and backup capacity as more people keep documents open at the same time.
Before creating the server, choose between ONLYOFFICE Docs (the editor service that connects to an existing file portal) and ONLYOFFICE Workspace (a broader collaboration platform with its own integrated services). The steps below focus on Docs in Docker, then explain Workspace, HTTPS, storage integration, JWT authentication, backups, updates, and recovery.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Choose ONLYOFFICE Docs or Workspace first
The two products solve different deployment problems, so selecting the wrong one can leave you with unnecessary services or missing functionality.
ONLYOFFICE Docs
Docs is the document, spreadsheet, and presentation editor service. Use it when an existing platform already provides user accounts, file storage, sharing, and permissions. Your file portal sends an editing request to Docs, Docs processes the document, and the portal remains the system of record for files and identities. This is usually the leaner VPS deployment.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
ONLYOFFICE Workspace
Workspace is an integrated collaboration environment. It is appropriate when the team wants a single product for documents, accounts, sharing, and related collaboration features instead of connecting Docs to a separate portal. The official Workspace installation guidance covers Community and Enterprise deployments on Docker, Linux, and Windows. Edition limits, licensing, and support terms can change, so verify the current terms immediately before deployment.
For a team that already runs a file portal such as Nextcloud, begin with Docs. For a new, self-contained collaboration service, evaluate Workspace and size the complete platform rather than sizing only the editor container.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsHow VPS capacity is measured
ONLYOFFICE defines a concurrent active user as someone who currently has a document open in the editor, whether that person is editing or merely viewing. A person who is logged into an integrated platform but has no document open does not count. This distinction is more useful than counting total registered accounts when selecting CPU and memory.
The following are official reference configurations. They are not guarantees: document size, conversion jobs, spreadsheets with complex formulas, simultaneous uploads, and integrations can change actual requirements.
| Concurrent active users | Reference CPU | Reference RAM | Reference free disk | Deployment guidance |
|---|---|---|---|---|
| Fewer than 100 | Single-core 2.8 GHz | 4 GB | 40 GB | Single server for a modest workload |
| 100–200 | Dual-core 2.8 GHz | 4 GB | 80 GB | Leave headroom for the operating system, proxy, and integrations |
| 200–400 | Quad-core 2.8 GHz | 4 GB | 160 GB | Measure conversion and editing latency during peak periods |
| More than 400 | Not stated as a single-server configuration | Not stated as a single-server configuration | Not stated as a single-server configuration | ONLYOFFICE recommends a cluster deployment |
The basic Community Edition Docker guidance calls for an amd64 or arm64 Linux VPS, a dual-core processor running at 2 GHz or better, at least 4 GB of RAM, at least 40 GB of free disk space, and at least 4 GB of swap. That minimum is a safer starting point than the single-core reference row because it leaves room for Docker, the reverse proxy, and first-run initialization.
Reserve storage for more than documents
Disk usage includes document data, temporary conversion files, logs, cache, the database, Docker image layers, and backups. A 40 GB minimum can be consumed quickly if you retain multiple backup generations or allow large uploads. Put backups on separate storage or an S3-compatible destination so a full VPS disk does not remove both the live service and its recovery copy.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Plan for bursts, not averages
Users often open files in waves at the start of a meeting or workday. Leave CPU and memory headroom for those bursts, and monitor editor response time rather than relying only on average utilization. If the server swaps heavily while documents are open, add RAM or reduce concurrency before increasing disk size.
Prepare the Linux VPS
- Provision the host. Choose an amd64 or arm64 Linux distribution supported by your Docker installation. Allocate the baseline CPU, RAM, disk, and swap, then attach additional block or backup storage if your retention policy requires it.
- Install Docker Engine and the Compose or Docker CLI tools. Use the distribution’s supported installation method and keep Docker packages patched. Add a dedicated administrative account, disable password-only SSH where practical, and restrict SSH to your management network or VPN.
- Set the system hostname and time. Correct time is important for TLS certificates, logs, token validation, and incident investigation. Enable automatic security updates for the operating system when they fit your change-control policy.
- Reserve the public ports. Allow inbound TCP 80 and 443 only when needed for HTTP validation and HTTPS traffic. Keep Docker’s management socket, database ports, and any internal service ports off the public interface.
Create persistent host directories
Container replacement is normal during upgrades. If logs, data, cache, and database state exist only inside the container, removing that container can remove the information you need for recovery. Create host directories before the first launch and mount them into the container.
sudo mkdir -p /srv/onlyoffice/logs
sudo mkdir -p /srv/onlyoffice/data
sudo mkdir -p /srv/onlyoffice/cache
sudo mkdir -p /srv/onlyoffice/db
sudo chown -R root:root /srv/onlyofficeThe official Docker guidance specifically recommends storing data outside Docker containers so a new image can be installed without losing data. The exact ownership and permissions required can vary with the image version; if startup logs report a permission error, apply the ownership documented for that version rather than making the directories world-writable.
Back up these directories as a consistent set. A backup that contains document files but not the database, or the database without the corresponding files, may not restore a usable installation.
Free tools Windows power users keep installed
One-click scans. No signup required.
Run ONLYOFFICE Docs with Docker
Pull the official onlyoffice/documentserver image and create the container with automatic restart and an explicit JWT secret. The following command shows the usual persistent mount pattern; confirm the container paths against the image documentation for the version you deploy.
sudo docker pull onlyoffice/documentserver
sudo docker run -d
--name onlyoffice-documentserver
--restart=always
-p 127.0.0.1:8080:80
-e JWT_ENABLED=true
-e JWT_SECRET=$(openssl rand -hex 32)
-v /srv/onlyoffice/logs:/var/log/onlyoffice
-v /srv/onlyoffice/data:/var/www/onlyoffice/Data
-v /srv/onlyoffice/cache:/var/lib/onlyoffice
-v /srv/onlyoffice/db:/var/lib/postgresql
onlyoffice/documentserverBinding the container to 127.0.0.1 keeps it reachable only through the reverse proxy on the same VPS. If NGINX runs on another host, use a private network address and firewall rules rather than exposing the container broadly.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Store the secret deliberately
Replace the one-time generated value with a secret stored in your password manager or deployment secret store. A generated secret that changes when the container is recreated can break an integration after a reboot or update. Do not put the secret in a public repository, shell history shared with other administrators, or a world-readable environment file.
Check the first startup
- List the container and confirm it is running:
sudo docker ps. - Watch initialization messages:
sudo docker logs -f onlyoffice-documentserver. - Open the local service through the reverse proxy only after the container reports that its services are ready.
- If startup appears to pause, allow time for first-run database initialization before repeatedly recreating the container.
A blank or unreachable welcome page commonly results from a port conflict, insufficient memory, or an initialization process that has not completed. Check docker ps, docker logs, host memory and swap usage, and whether another service already owns the configured port.
Put the service behind a domain, NGINX, and HTTPS
Internet-facing editor traffic should use HTTPS. You can use a certificate from a public certificate authority, automate certificates with Let’s Encrypt, or use a self-signed certificate when every client explicitly trusts your internal certificate authority. Public users should not be asked to bypass browser certificate warnings.
Point DNS and obtain the certificate
- Create an
AorAAAArecord for a dedicated hostname such asdocs.example.com. - Allow TCP 80 temporarily if your certificate method uses HTTP validation; allow TCP 443 for normal service.
- Issue the certificate and protect the private key with owner-only permissions. Keep renewal automated, then test renewal before the first certificate expires.
- Redirect HTTP requests to HTTPS after validation is working.
Configure NGINX as the TLS terminator
NGINX forwards requests to the container on localhost. The forwarded protocol and host headers are essential when the proxy terminates TLS; ONLYOFFICE must know that the original request was HTTPS and which public hostname the client used.
server {
listen 80;
server_name docs.example.com;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name docs.example.com;
ssl_certificate /etc/letsencrypt/live/docs.example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/docs.example.com/privkey.pem;
location / {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_read_timeout 3600s;
}
}Define the connection_upgrade map in the NGINX http block when your configuration uses it:
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}Run sudo nginx -t before reloading NGINX. Then reload with sudo systemctl reload nginx and test the hostname from a separate network. If the editor loads but saves or collaborative sessions fail, inspect the browser network panel and proxy logs for incorrect host, protocol, timeout, or upgrade headers.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Connect Docs to Nextcloud or another storage platform
In an integrated design, the storage platform remains responsible for users, permissions, and file locations. Docs receives an editor request and returns document changes through the integration. Configure the integration in the storage platform’s administration interface, using the public HTTPS URL of Docs rather than the private Docker address.
- Confirm that the storage platform can resolve the Docs hostname and validate its certificate.
- Enter the complete HTTPS endpoint for the Docs service in the platform’s ONLYOFFICE integration settings.
- Set the same JWT secret on both sides. The platform must send the token expected by Docs; a mismatch produces authorization or callback errors.
- Open a small text document, edit it, save it, close it, and reopen it. Then test a spreadsheet and a presentation to exercise different conversion paths.
- Test two users editing the same file, a read-only share, a renamed file, and a revoked user. These checks verify that permissions are enforced by the storage platform.
Do not expose the database or Docker socket to the storage platform. Only the HTTPS editor endpoint should be reachable across the network. If the portal and Docs are on separate machines, use private routing and firewall rules while retaining a publicly valid certificate for the hostname clients use.
Keep JWT enabled and protect the integration
ONLYOFFICE editors use JSON Web Tokens to protect documents from unauthorized access. JWT prevents an attacker who discovers an editor endpoint from issuing arbitrary document requests without a valid signed token.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Use a long, random secret generated by a cryptographically secure tool.
- Store it in a secret manager or tightly permissioned configuration file.
- Configure the identical value in Docs and the connected platform.
- When changing the secret, update both systems in a coordinated maintenance window and recreate the Docker container so the new environment value is applied.
- After rotation, open, edit, save, and download a test document before declaring the change complete.
JWT is not a substitute for HTTPS, account permissions, network controls, or timely patching. TLS protects the secret and document traffic while it crosses the network; the token controls whether an integration request is accepted.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Back up before every update
The safest update process preserves the mounted volumes, installs the new image, recreates the container with the same mappings, and verifies operation before deleting the old container.
- Announce a maintenance window. Ask users to close documents and stop automated jobs that call the editor.
- Record the current state. Save the image tag, container command or Compose file, environment values, NGINX configuration, certificate locations, and current container logs.
- Archive the mounted data. Back up
/srv/onlyoffice/logs,/srv/onlyoffice/data,/srv/onlyoffice/cache, and/srv/onlyoffice/dbto external backup storage. Preserve permissions and timestamps. - Pull the target image. Avoid an unreviewed floating update in production; use a versioning approach that lets you identify and return to the previous image.
- Recreate with identical mounts and the same JWT secret. Changing a mount path or secret during the image update can look like data loss or an integration failure.
- Validate before cleanup. Check logs, open and save representative files, test collaboration, and verify callbacks from the integrated platform.
- Retain the rollback option. Keep the previous image and backup until the new version has passed your agreed observation period.
Test a restore on a separate host at regular intervals. A backup is an operational control only when you know how long restoration takes, which data is required, and who can perform it.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Operate the VPS securely
- Patch on a schedule: update the Linux host, Docker, NGINX, certificate tooling, and ONLYOFFICE image. Review release notes for breaking changes before production updates.
- Monitor capacity: alert on disk exhaustion, sustained swap activity, high load, container restarts, certificate expiry, and failed backup jobs.
- Protect administration: restrict SSH, use key authentication, apply least-privilege sudo, and never publish Docker’s control socket or the database port.
- Separate duties: keep document data, backups, and administrative credentials under controlled access. Log changes to firewall, proxy, and container configuration.
- Define recovery objectives: decide how much recent work can be lost (RPO) and how quickly the editor must return (RTO), then choose backup frequency and VPS redundancy accordingly.
- Review account lifecycle: remove departed users in the storage platform, revoke shares, and rotate integration credentials when administrators or systems change.
Self-hosting keeps documents, user data, metadata, and audit logs on infrastructure selected by the operator. That control also makes the operator responsible for patching, backups, monitoring, access reviews, and incident response.
Troubleshoot the failures that occur most often
The container exits immediately
Run docker logs onlyoffice-documentserver. Check for a port already in use, inadequate RAM or swap, an unwritable mounted directory, or a database initialization failure. Correct the host condition, then recreate the container without deleting the mounted data.
The welcome page works but the integration rejects requests
Compare the JWT secret character for character on both systems, confirm JWT is enabled, and verify that the integration uses the public HTTPS hostname. A proxy that omits X-Forwarded-Proto or X-Forwarded-Host can also cause callback and URL-generation errors.
Editing works but saving or co-authoring times out
Inspect NGINX access and error logs, confirm WebSocket upgrade headers, and increase proxy read timeout for long editing sessions. Check whether the VPS is swapping or has exhausted file descriptors and disk space.
Documents appear to vanish after an update
Stop further changes and inspect the host mount paths. The container may have been recreated with a different mapping, causing it to start with empty internal directories. Restore the matching mounted volumes and recreate the container with the original paths and secret.
Recommended Free Tools
Browsers show a certificate warning
Verify that the certificate hostname matches the URL users open, that the complete certificate chain is installed, and that renewal has not failed. For an internal self-signed certificate, install the organization’s trusted root on every client instead of asking users to bypass warnings.
Licensing and support decisions
ONLYOFFICE states that its core products are open source under the AGPL v3, allowing users and contributors to read, run, and modify the source. Your obligations still depend on how you integrate and distribute the software. Commercial redistribution, proprietary modifications, and bundled services can trigger requirements that are not obvious from a simple Docker installation, so obtain legal advice for your use case.
Community deployment can be appropriate for a small team that can operate Linux, Docker, TLS, backups, and incident response. Consider an Enterprise edition or managed operational help when you need vendor support, formal response commitments, or assistance scaling beyond a single VPS. Confirm current edition limits and support terms before purchasing or committing production workloads.
Quick Recap
Production readiness checklist
- Docs or Workspace was selected for the actual collaboration model.
- The VPS meets the dual-core, 4 GB RAM, 40 GB disk, and 4 GB swap starting point, with capacity reserved for expected active editors.
- Logs, data, cache, and database paths are mounted from the host.
- The JWT secret is random, persistent, private, and configured identically in every integration.
- Only required public ports are exposed; databases and Docker administration remain private.
- NGINX forwards both
X-Forwarded-ProtoandX-Forwarded-Host, and HTTPS renewal is tested. - Representative editing, saving, sharing, and co-authoring tests pass.
- Mounted volumes are backed up externally before updates, and a restore drill has succeeded.
- Monitoring covers disk, memory, swap, restarts, certificates, and backup failures.
- A rollback image, configuration copy, and documented recovery procedure are available to the on-call administrator.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →
