Fix Nextcloud Talk Recording volumes and fully enable external DB/Redis integration for ONLYOFFICE.

Includes:
- Talk recording tmp volume wiring for Nextcloud
- ONLYOFFICE external PostgreSQL/Redis env integration
- Added explicit volumes for pgdata/redis/rabbitmq
- Switched ONLYOFFICE role to sys-stk-full-stateful
- Updated docker-compose mounts and vars
- CSP and feature flag improvements

Conversation reference: https://chatgpt.com/share/6922f50e-cc44-800f-89fc-e1251c5bbe45

roles/web-app-nextcloud/config/main.yml

@@ -42,6 +42,7 @@ docker:
     data:                   nextcloud_data
     whiteboard_tmp:         nextcloud_whiteboard_tmp
     whiteboard_fontcache:   nextcloud_whiteboard_fontcache
+    talk_recording_tmp:     nextcloud_talk_recording_tmp
   services:
     redis:
       enabled:              true

roles/web-app-nextcloud/templates/docker-compose.yml.j2

@@ -129,9 +129,10 @@
     networks:
       default:
         ipv4_address: 192.168.102.72
+    volumes:
+      - talk_recording_tmp:/tmp
 {% endif %}
 
-
 {% include 'roles/docker-compose/templates/volumes.yml.j2' %}
   data:
     name: {{ NEXTCLOUD_VOLUME }}
@@ -141,5 +142,9 @@
   whiteboard_fontcache:
     name: {{ NEXTCLOUD_WHITEBOARD_FRONTCACHE_VOLUME }}
 {% endif %}
+{% if NEXTCLOUD_RECORDING_ENABLED | bool %}
+  talk_recording_tmp:
+    name: {{ NEXTCLOUD_RECORDING_TMP_VOLUME }}
+{% endif %}
 
 {% include 'roles/docker-compose/templates/networks.yml.j2' %}

roles/web-app-nextcloud/templates/env.j2

@@ -62,7 +62,6 @@ STORAGE_STRATEGY=redis
 REDIS_URL=redis://redis:6379/0
 # Chromium (headless) hardening for Whiteboard
 CHROMIUM_FLAGS=--headless=new --no-sandbox --disable-gpu --disable-dev-shm-usage --use-gl=swiftshader --disable-software-rasterizer
-# Falls das Image Chromium mitbringt – Pfad meistens /usr/bin/chromium oder /usr/bin/chromium-browser:
 PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
 PUPPETEER_SKIP_DOWNLOAD=true
 {% endif %}

roles/web-app-nextcloud/vars/main.yml

@@ -141,6 +141,7 @@ NEXTCLOUD_RECORDING_VERSION:              "{{ applications | get_app_conf(applic
 NEXTCLOUD_RECORDING_ENABLED:              "{{ NEXTCLOUD_HPB_PLUGIN_ENABLED }}"
 NEXTCLOUD_RECORDING_PORT:                 1234
 NEXTCLOUD_RECORDING_SECRET:               "{{ applications | get_app_conf(application_id, 'credentials.talk_recording_secret') }}"
+NEXTCLOUD_RECORDING_TMP_VOLUME:           "{{ applications | get_app_conf(application_id, 'docker.volumes.talk_recording_tmp') }}"
 
 ### Collabora
 NEXTCLOUD_COLLABORA_URL:                  "{{ domains | get_url('web-svc-collabora', WEB_PROTOCOL) }}"