add nextcloud

nextcloud/docker-compose.yml

@@ -21,11 +21,15 @@ services:
       - REDIS_HOST=nextcloud-redis
       - TRUSTED_PROXIES=172.22.0.0/16 172.19.0.0/16
       - COLLABORA_DOMAIN=${COLLABORA_DOMAIN}
+      - TALK_DOMAIN=${TALK_DOMAIN}
+      - TALK_TURN_SECRET=${TALK_TURN_SECRET}
+      - TALK_SIGNALING_SECRET=${TALK_SIGNALING_SECRET}
     labels:
       - "traefik.enable=false"
     volumes:
       - nextcloud-data:/var/www/html
       - ./hooks/post-installation:/docker-entrypoint-hooks.d/post-installation
+      - ./php/opcache.ini:/usr/local/etc/php/conf.d/opcache-recommended.ini:ro
     expose:
       - 80
       - 9000
@@ -94,6 +98,35 @@ services:
     security_opt:
       - apparmor:unconfined
 
+  nc-talk:
+    container_name: nc-talk
+    image: ghcr.io/nextcloud-releases/aio-talk:latest
+    init: true
+    ports:
+      - "3478:3478/tcp"
+      - "3478:3478/udp"
+    environment:
+      - NC_DOMAIN=${NEXTCLOUD_DOMAIN}
+      - TALK_HOST=${TALK_DOMAIN}
+      - TURN_SECRET=${TALK_TURN_SECRET}
+      - SIGNALING_SECRET=${TALK_SIGNALING_SECRET}
+      - INTERNAL_SECRET=${TALK_INTERNAL_SECRET}
+      - TZ=${TZ:-Europe/Berlin}
+      - TALK_PORT=3478
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=traefik"
+      - "traefik.http.routers.nc-talk.rule=Host(`${TALK_DOMAIN}`)"
+      - "traefik.http.routers.nc-talk.entrypoints=websecure"
+      - "traefik.http.routers.nc-talk.middlewares=https-redirect"
+      - "traefik.http.routers.nc-talk.tls=true"
+      - "traefik.http.routers.nc-talk.tls.certresolver=le"
+      - "traefik.http.services.nc-talk.loadbalancer.server.port=8081"
+    networks:
+      - nextcloud
+      - traefik
+    restart: unless-stopped
+
 volumes:
   nextcloud-data:
     name: nextcloud-data