diff --git a/.env.sample b/.env.sample
index 2135b60..7317c06 100644
--- a/.env.sample
+++ b/.env.sample
@@ -14,10 +14,11 @@ ADMIN_USER=admin
 SECRET_DB_ROOT_PASSWORD_VERSION=v1
 SECRET_DB_PASSWORD_VERSION=v1
 SECRET_ADMIN_PASSWORD_VERSION=v1
+# SECRET_ONLYOFFICE_JWT_VERSION=v1
 
 EXTRA_VOLUME=/dev/null:/tmp/.dummy
 
 # X_FRAME_OPTIONS_ENABLED=1
 # X_FRAME_OPTIONS_ALLOW_FROM=embedding-site.example.org
 # APPS="calendar sociallogin onlyoffice"
-
+# ONLYOFFICE_URL=https://onlyoffice.example.com
diff --git a/abra.sh b/abra.sh
index 5ce711e..24f3b5d 100644
--- a/abra.sh
+++ b/abra.sh
@@ -36,3 +36,11 @@ install_bbb(){
     set_app_config bbb api.url "$URL"
     set_app_config bbb api.secret "$SECRET"
 }
+
+
+install_onlyoffice(){
+    install_apps onlyoffice
+    set_app_config onlyoffice DocumentServerUrl "$ONLYOFFICE_URL"
+    set_app_config onlyoffice jwt_secret $(cat /run/secrets/onlyoffice_jwt)
+    set_app_config onlyoffice customizationForcesave true
+}
diff --git a/compose.yml b/compose.yml
index 0e47ba9..372ceec 100644
--- a/compose.yml
+++ b/compose.yml
@@ -48,6 +48,7 @@ services:
     secrets:
       - db_password
       - admin_password
+      - onlyoffice_jwt
     environment:
       - APPS
       - X_FRAME_OPTIONS_ALLOW_FROM
@@ -65,6 +66,7 @@ services:
       - SMTP_AUTHTYPE=PLAIN
       - OVERWRITEPROTOCOL=https
       - PHP_MEMORY_LIMIT=1G
+      - ONLYOFFICE_URL
     volumes:
       - nextcloud:/var/www/html/
       - nextapps:/var/www/html/custom_apps:cached
@@ -111,6 +113,9 @@ secrets:
   admin_password:
     external: true
     name: ${STACK_NAME}_admin_password_${SECRET_ADMIN_PASSWORD_VERSION}
+  onlyoffice_jwt:
+    external: true
+    name: ${STACK_NAME}_onlyoffice_jwt_${SECRET_ONLYOFFICE_JWT_VERSION}
 
 volumes:
   nextcloud: