feat: add basic nextcloud role

nextcloud with optional collabora base setup

roles/nextcloud/tasks/collabora.yml

@@ -0,0 +1,17 @@
+#SPDX-License-Identifier: MIT-0
+---
+# tasks file for configuring Collabora in Nextcloud
+- name: Configure Collabora WOPI URL
+  community.docker.docker_container_exec:
+    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
+    command: php /var/www/html/occ config:app:set richdocuments wopi_url --value=https://{{ nextcloud_collabora_domain }}
+
+- name: Configure certificate verification for Collabora
+  community.docker.docker_container_exec:
+    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
+    command: php /var/www/html/occ config:app:set richdocuments disable_certificate_verification --value={{ nextcloud_collabora_disable_cert_verification | ternary('yes', 'no') }}
+
+- name: Set Collabora WOPI allowlist
+  community.docker.docker_container_exec:
+    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
+    command: php /var/www/html/occ config:app:set richdocuments wopi_allowlist --value=''

roles/nextcloud/tasks/main.yml

@@ -0,0 +1,63 @@
+#SPDX-License-Identifier: MIT-0
+---
+# tasks file for nextcloud
+- name: Create docker compose directory
+  file:
+    path: "{{ nextcloud_docker_compose_dir }}"
+    state: directory
+    mode: '0755'
+
+- name: Create nextcloud data directory
+  file:
+    path: "{{ nextcloud_docker_volume_dir }}/data"
+    state: directory
+    mode: '0755'
+
+- name: Create postgres data directory
+  file:
+    path: "{{ nextcloud_docker_volume_dir }}/postgresql"
+    state: directory
+    mode: '0755'
+
+- name: Create docker-compose file for nextcloud
+  template:
+    src: docker-compose.yml.j2
+    dest: "{{ nextcloud_docker_compose_dir }}/docker-compose.yml"
+    mode: '0644'
+
+- name: Create nginx template
+  template:
+    src: nginx.conf.j2
+    dest: "{{ nextcloud_docker_compose_dir }}/nginx.conf"
+    mode: '0644'
+  notify: Restart nginx container
+
+- name: Create database initialization script
+  template:
+    src: init-db.sql.j2
+    dest: "{{ nextcloud_docker_compose_dir }}/init-db.sql"
+    mode: '0644'
+
+- name: Start nextcloud container
+  community.docker.docker_compose_v2:
+    project_src: "{{ nextcloud_docker_compose_dir }}"
+    state: present
+
+- name: Wait for Nextcloud to be ready
+  ansible.builtin.shell:
+    cmd: docker compose exec -T nextcloud php /var/www/html/occ status --output=json
+    chdir: "{{ nextcloud_docker_compose_dir }}"
+  retries: 30
+  delay: 5
+  register: nextcloud_ready
+  until:
+    - nextcloud_ready.rc == 0
+    - (nextcloud_ready.stdout | from_json).installed == true
+  changed_when: false
+
+- name: Install nextcloud plugins
+  ansible.builtin.include_tasks: plugins.yml
+
+- name: Configure nextcloud collabora
+  ansible.builtin.include_tasks: collabora.yml
+  when: nextcloud_enable_collabora

roles/nextcloud/tasks/plugins.yml

@@ -0,0 +1,24 @@
+#SPDX-License-Identifier: MIT-0
+---
+# tasks file for installing Nextcloud plugins/apps
+- name: Install Collabora Online app (richdocuments)
+  community.docker.docker_container_exec:
+    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
+    command: php /var/www/html/occ app:install richdocuments
+  register: install_collabora_result
+  failed_when:
+    - install_collabora_result.failed
+    - '"already installed" not in install_collabora_result.stdout | default("")'
+    - '"already installed" not in install_collabora_result.stderr | default("")'
+  when: nextcloud_enable_collabora
+
+- name: Enable Collabora Online app
+  community.docker.docker_container_exec:
+    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
+    command: php /var/www/html/occ app:enable richdocuments
+  register: enable_collabora_result
+  failed_when:
+    - enable_collabora_result.failed
+    - '"already enabled" not in enable_collabora_result.stdout | default("")'
+    - '"already enabled" not in enable_collabora_result.stderr | default("")'
+  when: nextcloud_enable_collabora