For a dependable VPS deployment, run ONLYOFFICE Docs in Docker, begin with at least 4 GB of RAM, 40 GB of free disk and 4 GB of swap, persist every data volume on the host, and place the service behind an HTTPS reverse proxy. Choose Docs when another platform already provides accounts and file storage; choose Workspace when you need an integrated collaboration suite.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
Choose the right ONLYOFFICE product first
ONLYOFFICE Docs is the editor service. It opens and converts word-processing, spreadsheet and presentation files, while an existing file portal or collaboration system supplies user accounts, storage and sharing. This is usually the simplest choice when your team already runs a platform such as Nextcloud.
As an Amazon Associate I earn from qualifying purchases.
ONLYOFFICE Workspace is the broader collaboration environment. Its deployment documentation covers Community and Enterprise editions on Docker, Linux and Windows, and it combines document editing with the surrounding collaboration functions. Confirm current edition limits, licensing and support terms immediately before deployment because those terms can change.
- Choose Docs when identity, permissions and file storage already exist elsewhere.
- Choose Workspace when you want an integrated environment rather than an editor attached to another portal.
Both products can be self-hosted, but the resource plan, backup scope and administration work differ. The procedure below focuses on ONLYOFFICE Docs in Docker, the documented path for a Linux VPS.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Size the VPS for real editing activity
ONLYOFFICE counts a concurrent active user as someone who currently has a document open in the editor, whether that person is typing or only viewing it. A person merely logged into an integrated platform does not consume a concurrent-editor slot. This distinction is essential when estimating capacity.
| Concurrent active users | Reference CPU | Reference RAM | Reference disk |
|---|---|---|---|
| Fewer than 100 | Single-core, 2.8 GHz | 4 GB | 40 GB |
| 100–200 | Dual-core, 2.8 GHz | 4 GB | 80 GB |
| 200–400 | Quad-core, 2.8 GHz | 4 GB | 160 GB |
| More than 400 | Cluster deployment recommended | Scale by cluster design | Scale by cluster design |
These are reference configurations from the ONLYOFFICE Help Center (2026), not guarantees. Large files, frequent conversions, simultaneous imports and export jobs, and slow storage can raise CPU, memory and disk requirements. The minimum Community Edition guidance is a dual-core processor at 2 GHz or better, 4 GB of RAM, 40 GB of free disk and 4 GB of swap on an amd64 or arm64 Linux VPS.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Account for more than the document directory
- Editor headroom: leave CPU and memory available for conversion workers, the reverse proxy, monitoring and the operating system.
- Document growth: reserve space for the files themselves, temporary conversion data and revisions retained by the connected platform.
- Database and logs: persistent database state and logs grow independently of the visible document library.
- Backups: backup archives need free space or an external destination; a full disk can prevent both editing and recovery.
- Network: active editing is interactive, so latency and stable bandwidth matter even when CPU usage looks modest.
Start with the minimum only for a small team and observe CPU, memory, swap, disk latency and the number of simultaneously open documents. Increase resources before the VPS begins swapping or queueing conversions.
Prepare the Linux VPS and Docker
Prerequisites checklist
- An amd64 or arm64 Linux VPS with a supported Docker installation.
- A DNS name whose records point to the VPS.
- At least the baseline 4 GB RAM, 40 GB free disk and 4 GB swap; more for active editors and large files.
- Administrative access for Docker, firewall rules and certificate management.
- A backup destination separate from the VPS.
Keep Docker administration, databases and internal service ports off the public interface. Expose only the web ports required for the reverse proxy and the administration access you actually use.
Create host directories before starting the container
Container replacement must not be allowed to erase operational state. Create dedicated host directories for logs, the document data directory, ONLYOFFICE runtime/cache state and the database:
sudo mkdir -p /srv/onlyoffice/{logs,data,lib,db}
sudo chmod 700 /srv/onlyofficeIn this layout, logs stores service logs, data maps to /var/www/onlyoffice/Data, lib holds the service’s persistent runtime and cache state, and db holds PostgreSQL data. The exact ownership required can vary with the image version; after the first start, inspect the created files and apply the ownership documented for the image you are running.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Back up these directories as a unit. Omitting the database or runtime state can leave a document service that starts but cannot complete conversions or integrations after restoration.
Run ONLYOFFICE Docs with persistent volumes and JWT
Pull the official image and create the container with a restart policy, explicit volume mappings and a deliberate JSON Web Token secret. The following command illustrates the documented volume layout; keep the same mappings whenever you recreate the container.
sudo docker pull onlyoffice/documentserver
sudo docker run -d
--name onlyoffice-docs
--restart=always
-p 127.0.0.1:8080:80
-e JWT_ENABLED=true
-e JWT_SECRET='replace-with-a-long-random-secret'
-v /srv/onlyoffice/logs:/var/log/onlyoffice
-v /srv/onlyoffice/data:/var/www/onlyoffice/Data
-v /srv/onlyoffice/lib:/var/lib/onlyoffice
-v /srv/onlyoffice/db:/var/lib/postgresql
onlyoffice/documentserverBinding the container to 127.0.0.1 keeps it reachable only through the local reverse proxy. If your proxy runs on another host, bind to a private interface and restrict that interface with firewall rules instead of publishing the editor directly to the Internet.
Generate and protect the JWT secret
Use a high-entropy value, store it in your password manager or secrets system, and configure the identical value in every connector that calls the editor. For example:
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →openssl rand -hex 32JWT protects editor requests from unauthorized access. In Docker, changing the secret requires recreating the container with the new environment variable; editing a shell history line does not change a running container. A generated default secret can change across replacements and break integrations after a reboot, so set one explicitly.
Verify startup before exposing a domain
- Check that Docker reports the container as running:
sudo docker ps --filter name=onlyoffice-docs. - Read the startup log:
sudo docker logs --tail=200 onlyoffice-docs. - From the VPS, request the local endpoint:
curl -I http://127.0.0.1:8080. - Open the returned address through a temporary SSH tunnel or the reverse proxy and confirm the ONLYOFFICE welcome page.
First startup can take time while the database initializes. If the container exits, check the three common causes identified by the Help Center: a port conflict, insufficient memory or incomplete first-time database initialization. Use sudo ss -ltnp to identify a conflicting listener, inspect memory and swap with free -h, and review the complete container log before changing configuration.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Put the editor behind NGINX and HTTPS
Internet-facing editor traffic should use a trusted certificate. The installation guidance supports certificates issued by a public certificate authority, automated Let’s Encrypt certificates and self-signed certificates when every client explicitly trusts the issuing certificate. Public collaboration normally calls for a publicly trusted certificate.
Reverse-proxy request flow
Point your DNS record at the VPS, terminate TLS at NGINX, and proxy requests to the loopback address. Preserve the original scheme and host so ONLYOFFICE can build correct callback and download URLs.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchserver {
listen 80;
server_name docs.example.net;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
server_name docs.example.net;
ssl_certificate /etc/letsencrypt/live/docs.example.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/docs.example.net/privkey.pem;
location / {
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}The critical forwarded headers are X-Forwarded-Proto and X-Forwarded-Host. If either is missing or incorrect, integrations may generate HTTP links from an HTTPS site, reject callbacks or report that the editor URL is unreachable. Test the NGINX configuration with sudo nginx -t, reload it, then open a document through the public hostname.
Certificate and key handling
- Keep private-key files readable only by the account that needs them, as recommended in the installation guidance.
- Renew automated certificates before expiry and reload NGINX after renewal.
- For a self-signed certificate, distribute the trust chain to every browser, desktop client and integration host; otherwise users will see certificate errors.
Connect Nextcloud or another storage platform
When Docs is attached to an existing portal, the portal remains the system of record for users, permissions and files. The editor receives a document URL, opens a session, and returns changes through the connector.
- Install or enable the portal’s ONLYOFFICE connector or integration module.
- In the connector’s administrator settings, enter the public HTTPS address of the Docs service, such as
https://docs.example.net; do not use the container’s private loopback address. - Enable JWT in the connector and enter exactly the same secret used in
JWT_SECRET. - Save the settings and use the connector’s built-in connection test, if available.
- Open a small test document, edit it in a second browser session and verify that the saved file returns to the portal.
A mismatch in hostname, certificate trust, forwarded headers or JWT is more likely than an editor defect when a connector cannot open a file. Check the portal’s integration log and the Docs container log together so you can match a failed request to its response.
Back up data before every update
ONLYOFFICE recommends storing data outside Docker containers because this allows upgrades without losing data. Treat all mounted paths as part of one recovery set:
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
sudo tar -czf /backup/onlyoffice-$(date +%F).tar.gz
/srv/onlyoffice/logs
/srv/onlyoffice/data
/srv/onlyoffice/lib
/srv/onlyoffice/dbCopy the archive to external backup storage, apply retention rules, and test extracting it on a separate system. A backup that has never been restored is only an assumption.
Safe image-update sequence
- Announce a maintenance window and stop new editing sessions if your portal supports that control.
- Archive all mounted directories and confirm that the archive is readable.
- Record the current image tag, container configuration and JWT secret location.
- Pull the replacement image:
sudo docker pull onlyoffice/documentserver. - Stop and remove only the container, never the host directories:
sudo docker stop onlyoffice-docs && sudo docker rm onlyoffice-docs. - Recreate it with the identical volume mappings, published port, restart policy and JWT settings.
- Watch startup logs, open and edit a test document, and verify a portal save before ending the maintenance window.
- Keep the previous image available until the new container has passed those checks, so a rollback does not depend on downloading an image during an incident.
Do not use an anonymous volume or a new host path during an update. That creates an apparently clean installation while leaving the previous data behind.
Operate the VPS securely
Network and access controls
- Allow inbound TCP 80 and 443 only when needed for certificate issuance and web traffic; restrict SSH to trusted addresses or a VPN.
- Keep Docker’s socket, database ports and internal services off public interfaces.
- Use separate administrator accounts and rotate credentials when staff leave.
- Limit portal permissions so users can edit only the files they are authorized to access.
Patch and monitor
Self-hosting moves responsibility for operating-system patches, Docker updates, ONLYOFFICE updates, certificate renewal, backups, monitoring and incident response to the operator. Monitor container restarts, HTTP error rates, CPU, memory, swap, disk capacity, disk latency and certificate expiry. Alert before the document volume or backup destination reaches capacity.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Recovery planning
Document who can restore the VPS, where the archives and JWT secret are stored, which DNS record must be changed, and how to validate a restored integration. A recovery drill should include restoring the mounted directories, recreating the container with the same mappings, renewing or reinstalling the certificate, and opening a document through the connected portal.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Licensing and support decisions
ONLYOFFICE states that its core products are open source under AGPL v3, allowing users and contributors to read, run and modify the source. Your obligations still depend on how the software is integrated and distributed. If you redistribute a modified service or bundle it into a commercial product, obtain legal advice rather than assuming that self-hosting alone determines compliance.
Community and Enterprise offerings can differ in limits, support and deployment rights. Confirm the current terms before choosing an edition, especially when the VPS serves customers or multiple organizations.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Capacity decisions after launch
When a single VPS is enough
A single host is appropriate when the measured number of open documents stays within the reference range, backups complete within your recovery window, and maintenance can tolerate a short outage. Keep spare CPU and memory for conversion bursts rather than sizing to an average idle day.
When to scale vertically
Add vCPUs, RAM, faster storage or swap when active editors increase, conversions queue, or the operating system begins reclaiming memory. Increase disk before free space falls low enough to block logs, database writes or temporary files.
When to plan a cluster
Above 400 concurrent active users, the official reference recommends a cluster deployment. A cluster requires deliberate traffic routing, shared or replicated state, coordinated upgrades and a tested failover plan; it is not simply several independent containers with separate data directories.
Troubleshooting by symptom
The welcome page never appears
Check that the container is running, port 8080 is free, and the first-time database initialization has completed. Inspect docker logs before deleting anything. Increasing memory may be necessary when the container is repeatedly killed by the host.
The portal reports an unauthorized request
Compare the portal’s JWT secret with the running container’s value, confirm JWT is enabled, and recreate the container after changing the environment variable. Also verify that the portal calls the public HTTPS hostname rather than an internal address.
Documents open but cannot save
Check write permissions on the mounted data and database directories, available disk space and the portal callback URL. Review NGINX’s forwarded host and protocol headers; a proxy that hides the original HTTPS scheme can cause callback failures.
Users see certificate warnings
Install a certificate whose name matches the public hostname, serve the complete certificate chain, and reload NGINX after renewal. With a self-signed certificate, install the issuing certificate in every client that must trust the service.
An update looks like a blank installation
Stop the new container, restore the previous host-directory mappings, and recreate it using the archive. This symptom usually means a new empty volume or host path was mounted instead of the established directories.
Practical go-live checklist
- Docs or Workspace choice matches where identity, storage and sharing are managed.
- VPS architecture is amd64 or arm64 Linux with Docker, and resources match expected concurrent editors.
- At least 4 GB RAM, 40 GB free disk and 4 GB swap are available for a small deployment.
- Logs, document data, runtime/cache state and database state are mounted on the host.
- JWT is enabled with a stored, high-entropy secret shared with the connector.
- Only the reverse proxy is Internet-facing; Docker and database interfaces remain private.
- HTTPS works on the final domain, and NGINX forwards both required headers.
- A test document opens, edits and saves through the real portal.
- Backups are external, retained and successfully restored in a drill.
- Patch, monitoring, access-review and incident-response owners are named.
With those controls in place, a VPS gives your team direct control over document data, metadata and audit logs while making the operational cost explicit: you must maintain the host, protect integrations, patch the stack and prove that recovery works.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
