# opencloud-dockhand

Public Gitea repo (`hermes/opencloud-dockhand`) — Docker Compose reference stack for deploying OpenCloud in the Dockhand environment (`https://dock.maukit.com/api`, auth enabled 2026-09-09).

Built from upstream: https://github.com/opencloud-eu/opencloud-compose (main branch).

## What's included
- `docker-compose.yml` — OpenCloud core service
- `search/tika.yml` — full-text search (Apache Tika, health-checked)
- `weboffice/euro-office.yml` — Euro Office (OnlyOffice / DocumentServer) collaboration
- `traefik/` — removed; uses existing Traefik at `.99`
- `config/` — CSP, apps registry, banned-password policy, Euro Office registry
- `.env.example` — production variables (`cloud.maukit.com`, `euro-office.maukit.com`, `tls.certresolver=letsencrypt`)

## Key settings
- Domains: `OC_DOMAIN=cloud.maukit.com`; `EURO_OFFICE_DOMAIN=euro-office.maukit.com`
- TLS: handled by existing Traefik (let's encrypt)
- Storage: bind-mounted `opencloud-config` / `opencloud-data` (host-owned 1000:1000)
- No deploy executed; files only for session reference

## Usage
```bash
# Copy vars and set secrets before any start:
cp .env.example .env
# Set: INITIAL_ADMIN_PASSWORD, EURO_OFFICE_JWT_SECRET, OC_DOMAIN, etc.

# Compose assembly (no traefik):
docker compose -f docker-compose.yml -f search/tika.yml -f weboffice/euro-office.yml up -d
```

## Notes
- Not deployed in this session; stack saved to `/opt/data/opencloud-dockhand/`
- User (Alister): UK-based, Proxmox `.233`, NAS `.22`, Dockhand `.99`
- Gitea access via `hermes` user with PAT (`/opt/data/.secrets/gitea_hermes_token`); monthly cron `7ff91e048467` verified