diff --git a/hosts/stratus/containers/nextcloud/default.nix b/hosts/stratus/containers/nextcloud/default.nix
index 5038684..65ae8bb 100644
--- a/hosts/stratus/containers/nextcloud/default.nix
+++ b/hosts/stratus/containers/nextcloud/default.nix
@@ -47,7 +47,7 @@
         };
 
         configureRedis = true;
-        maxUploadSize = "4G";
+        maxUploadSize = "16G";
         phpOptions."opcache.interned_strings_buffer" = "16";
 
         autoUpdateApps = {
@@ -55,11 +55,10 @@
           startAt = "04:00:00";
         };
         extraApps = {
-          inherit (config.services.nextcloud.package.packages.apps) contacts calendar;
+          inherit (config.services.nextcloud.package.packages.apps) contacts calendar onlyoffice;
         };
       };
 
       myConfig.tailscale.serve = "80";
     };
-
 }
diff --git a/hosts/stratus/containers/onlyoffice/default.nix b/hosts/stratus/containers/onlyoffice/default.nix
new file mode 100644
index 0000000..8b15019
--- /dev/null
+++ b/hosts/stratus/containers/onlyoffice/default.nix
@@ -0,0 +1,20 @@
+{
+  containers.onlyoffice.config =
+    { config, ... }:
+    {
+      sops.secrets."onlyoffice-secret-key" = {
+        owner = config.users.users.onlyoffice.name;
+        inherit (config.users.users.onlyoffice) group;
+      };
+
+      nixpkgs.config.allowUnfree = true;
+
+      services.onlyoffice = {
+        enable = true;
+        hostname = "onlyoffice.stork-atlas.ts.net";
+        jwtSecretFile = config.sops.secrets."onlyoffice-secret-key".path;
+      };
+
+      myConfig.tailscale.serve = "8000";
+    };
+}