Restructure and cleaned up in preparation of new backup logic

roles/web-app-nextcloud/templates/env.j2

@@ -21,7 +21,7 @@ SMTP_PASSWORD=                  {{ users['no-reply'].mailu_token }}
 
 # Email from configuration
 MAIL_FROM_ADDRESS=              "{{ users['no-reply'].username }}"
-MAIL_DOMAIN=                    "{{system_email.domain}}"
+MAIL_DOMAIN=                    "{{ system_email.domain }}"
 
 # Initial Admin Data
 NEXTCLOUD_ADMIN_USER=           "{{applications | get_app_conf(application_id, 'users.administrator.username', True)}}"
@@ -29,7 +29,7 @@ NEXTCLOUD_ADMIN_PASSWORD=       "{{applications | get_app_conf(application_id, '
 
 # Security
 
-NEXTCLOUD_TRUSTED_DOMAINS=      "{{domains | get_domain(application_id)}}"
+NEXTCLOUD_TRUSTED_DOMAINS=      "{{ nextcloud_domains }}"
 # Whitelist local docker gateway in Nextcloud to prevent brute-force throtteling
 TRUSTED_PROXIES=                "{{ networks.internet.values() | select | join(',') }}"
 OVERWRITECLIURL=                "{{ domains | get_url(application_id, web_protocol) }}"
@@ -37,4 +37,17 @@ OVERWRITEPROTOCOL=              "https"
 
 # Redis Configuration
 REDIS_HOST=                     redis
-REDIS_PORT=                     6379
+REDIS_PORT=                     6379
+
+{% if nextcloud_talk_enabled %}
+# Talk Configuration
+# This code was just moved here during refactoring and isn't tested yet.
+# @todo move it to an own env file for encapsulation reasons
+NC_DOMAIN=cloud.yourdomain.tld
+TALK_HOST=signaling.yourdomain.tld
+TURN_SECRET=${TURN_SECRET}
+SIGNALING_SECRET=${SIGNALING_SECRET}
+TZ=Europe/Berlin
+TALK_PORT=3478
+INTERNAL_SECRET=${INTERNAL_SECRET}
+{% endif %}