Make Collabora proxy work over SSL

hosts/index/config/groupware/cells.nix

···
 { flakeRoot, ... }:
 
 let
+  hostname = "drive.encrypted.group";
+  localHostname = "drive.local.encrypted.group"; # TODO: this can change
+
   cellsModule = import (flakeRoot + /packages/server/groupware/cells.nix) {
     hosts = [
       {
···
         ssl = "internal";
       }
       {
-        name = "drive.encrypted.group";
+        name = hostname;
         ssl = "cloudflare";
 
         useLocal = true;
···
     "/mnt/apps/pydio"
     "/mnt/data/pydio"
   ];
+
+  services.collabora-online = {
+    aliasGroups = [ { host = "https://${hostname}:443"; } { host = "https://${localHostname}:443"; } ]; # TODO: messy
+  };
 }

packages/server/groupware/collabora.nix

···
-{ config, pkgs, ... }:
+{ config, pkgs, pkgs-personal, ... }:
 
 # Socket support: https://github.com/CollaboraOnline/online/issues/7156
 
···
 
   services.collabora-online = {
     enable = true;
+
+    package = pkgs-personal.collabora-online;
 
     settings = {
       languagetool = {
···
       };
 
       ssl = {
-        enable = false;
+        # SSL is not needed as Collabora will always be run locally and/or reverse proxied with SSL.
+        # However, SSL is still required by some services (Pydio Cells) in order to connect through secure websockets.
+        enable = true;
+        termination = true;
+        ssl_verification = false;
       };
 
       wasm = {