Add Nextcloud service and reformat server tasks

Add Nextcloud docker-compose template and Ansible task to deploy it.
Include nextcloud in the services list, normalize indentation in
ansible/tasks/servers/server.yml, and update nixpkgs rev/hash in
flake.lock.

ansible/tasks/servers/server.yml

@@ -77,6 +77,10 @@
             enabled: true
             hosts:
                 - mennos-server
+          - name: nextcloud
+            enabled: true
+            hosts:
+                - mennos-server
           - name: dozzle
             enabled: true
             hosts:

ansible/tasks/servers/services/nextcloud/docker-compose.yml.j2

@@ -0,0 +1,73 @@
+services:
+  nextcloud:
+    image: nextcloud
+    container_name: nextcloud
+    restart: unless-stopped
+    networks:
+      - nextcloud
+      - caddy_network
+    depends_on:
+      - nextclouddb
+      - redis
+    ports:
+      - 8081:80
+    volumes:
+      - {{ nextcloud_data_dir }}/nextcloud/html:/var/www/html
+      - {{ nextcloud_data_dir }}/nextcloud/custom_apps:/var/www/html/custom_apps
+      - {{ nextcloud_data_dir }}/nextcloud/config:/var/www/html/config
+      - {{ nextcloud_data_dir }}/nextcloud/data:/var/www/html/data
+    environment:
+      - PUID=1000
+      - PGID=100
+      - TZ=Europe/Amsterdam
+      - MYSQL_DATABASE=nextcloud
+      - MYSQL_USER=nextcloud
+      - MYSQL_PASSWORD={{ lookup('community.general.onepassword', 'Nextcloud', vault='Dotfiles', field='MYSQL_NEXTCLOUD_PASSWORD') }}
+      - MYSQL_HOST=nextclouddb
+      - REDIS_HOST=redis
+    deploy:
+      resources:
+        limits:
+          memory: 2G
+
+  nextclouddb:
+    image: mariadb:11.4.7
+    container_name: nextcloud-db
+    restart: unless-stopped
+    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
+    networks:
+      - nextcloud
+    volumes:
+      - {{ nextcloud_data_dir }}/database:/var/lib/mysql
+    environment:
+      - PUID=1000
+      - PGID=100
+      - TZ=Europe/Amsterdam
+      - MYSQL_RANDOM_ROOT_PASSWORD=true
+      - MYSQL_PASSWORD={{ lookup('community.general.onepassword', 'Nextcloud', vault='Dotfiles', field='MYSQL_NEXTCLOUD_PASSWORD') }}
+      - MYSQL_DATABASE=nextcloud
+      - MYSQL_USER=nextcloud
+    deploy:
+      resources:
+        limits:
+          memory: 1G
+
+  redis:
+    image: redis:alpine
+    container_name: redis
+    volumes:
+      - {{ nextcloud_data_dir }}/redis:/data
+    networks:
+      - nextcloud
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+
+networks:
+  nextcloud:
+    name: nextcloud
+    driver: bridge
+  caddy_network:
+    name: caddy_default
+    external: true

ansible/tasks/servers/services/nextcloud/nextcloud.yml

@@ -0,0 +1,31 @@
+---
+- name: Deploy Nextcloud service
+  block:
+      - name: Set Nextcloud directories
+        ansible.builtin.set_fact:
+            nextcloud_service_dir: "{{ ansible_env.HOME }}/.services/nextcloud"
+            nextcloud_data_dir: "/mnt/services/nextcloud"
+
+      - name: Create Nextcloud directory
+        ansible.builtin.file:
+            path: "{{ nextcloud_service_dir }}"
+            state: directory
+            mode: "0755"
+
+      - name: Deploy Nextcloud docker-compose.yml
+        ansible.builtin.template:
+            src: docker-compose.yml.j2
+            dest: "{{ nextcloud_service_dir }}/docker-compose.yml"
+            mode: "0644"
+        register: nextcloud_compose
+
+      - name: Stop Nextcloud service
+        ansible.builtin.command: docker compose -f "{{ nextcloud_service_dir }}/docker-compose.yml" down --remove-orphans
+        when: nextcloud_compose.changed
+
+      - name: Start Nextcloud service
+        ansible.builtin.command: docker compose -f "{{ nextcloud_service_dir }}/docker-compose.yml" up -d
+        when: nextcloud_compose.changed
+  tags:
+      - services
+      - nextcloud