Is it possible to allow access to the Onlyoffice document server only from a specific Nextcloud/Owncloud?

Question

CMS

Hello. Raised two servers: one with nextcloud, the other with onlyoffice. Connected the second to the first by writing the address. Logically, anyone can use it. Is this a limitation of the free version? How can it be fixed otherwise?
Thanks

Answer 1

Here's what I ended up doing:

Answer 2

Restrict connections by setting up a firewall on the host with ONLYOFFICE

Answer 3

I googled the following option to access the document server only from a specific IP. Suppose Nextcloud is running on the example.com domain, whose IP is 123.45.67.89, and the document server is running on the office.example.com domain, whose IP is unimportant.
We edit /etc/onlyoffice/documentserver/default.json - look for ipfilter and bring it to the following form:

"ipfilter": {
        "rules": [
          {
            "address": "123.45.67.89",
            "allowed": true
          },
          {
            "address": "*",
            "allowed": false
          }
        ],
        "useforrequest": false,
        "errorcode": 401
      },

Thus, we allow access to the document server only from IP 123.45.67.89, when trying to open office.example.com from another IP, OO will not give access to the document server. To apply the changes, run:
sudo supervisorctl restart all