Add full ONLYOFFICE integration:

- New web-svc-onlyoffice role (Docker, env, CSP, proxy hooks)
- Nextcloud plugin integration with JWT and CSP updates
- Custom Nextcloud image with updated CA certificates
- Networking and port assignments
- Disabled Collabora by default
- Enabled ONLYOFFICE by default
- Link to conversation for reference: https://chatgpt.com/share/691f49ac-54d8-800f-83c3-60cf8c100183

group_vars/all/09_networks.yml

@@ -116,6 +116,8 @@ defaults_networks:
       subnet: 192.168.104.64/28
     web-app-shopware:
       subnet: 192.168.104.80/28
+    web-svc-onlyoffice:
+      subnet: 192.168.104.96/28
 
     # /24 Networks / 254 Usable Clients
     web-app-bigbluebutton:

group_vars/all/10_ports.yml

@@ -82,6 +82,7 @@ ports:
       web-app-minio_console: 8058
       web-app-mini-qr: 8059
       web-app-shopware: 8060
+      web-svc-onlyoffice: 8061
       web-app-bigbluebutton: 48087    # This port is predefined by bbb. @todo Try to change this to a 8XXX port
   public:
     # The following ports should be changed to 22 on the subdomain via stream mapping