Initial commit: opencloud-dockhand stack

- OpenCloud core + tika full-text search + Euro Office
- Existing Traefik (.maukit.com, TLS letsencrypt)
- No deploy; reference files

REPO.md

@@ -0,0 +1,34 @@
+# opencloud-dockhand
+
+Public Gitea repo (`hermes/opencloud-dockhand`) — Docker Compose reference stack for deploying OpenCloud in the Dockhand environment (`https://dock.maukit.com/api`, auth enabled 2026-09-09).
+
+Built from upstream: https://github.com/opencloud-eu/opencloud-compose (main branch).
+
+## What's included
+- `docker-compose.yml` — OpenCloud core service
+- `search/tika.yml` — full-text search (Apache Tika, health-checked)
+- `weboffice/euro-office.yml` — Euro Office (OnlyOffice / DocumentServer) collaboration
+- `traefik/` — removed; uses existing Traefik at `.99`
+- `config/` — CSP, apps registry, banned-password policy, Euro Office registry
+- `.env.example` — production variables (`cloud.maukit.com`, `euro-office.maukit.com`, `tls.certresolver=letsencrypt`)
+
+## Key settings
+- Domains: `OC_DOMAIN=cloud.maukit.com`; `EURO_OFFICE_DOMAIN=euro-office.maukit.com`
+- TLS: handled by existing Traefik (let's encrypt)
+- Storage: bind-mounted `opencloud-config` / `opencloud-data` (host-owned 1000:1000)
+- No deploy executed; files only for session reference
+
+## Usage
+```bash
+# Copy vars and set secrets before any start:
+cp .env.example .env
+# Set: INITIAL_ADMIN_PASSWORD, EURO_OFFICE_JWT_SECRET, OC_DOMAIN, etc.
+
+# Compose assembly (no traefik):
+docker compose -f docker-compose.yml -f search/tika.yml -f weboffice/euro-office.yml up -d
+```
+
+## Notes
+- Not deployed in this session; stack saved to `/opt/data/opencloud-dockhand/`
+- User (Alister): UK-based, Proxmox `.233`, NAS `.22`, Dockhand `.99`
+- Gitea access via `hermes` user with PAT (`/opt/data/.secrets/gitea_hermes_token`); monthly cron `7ff91e048467` verified