Add asterisk, nextcloud, onlyoffice, mattermost services + vendor/easy-asterisk

asterisk.sh (homelab):
- Easy Asterisk PBX with self-hosted coturn TURN server
- Vendored from outis1one/easy-asterisk v0.10.0 for offline install
- LAN-only or FQDN mode (TLS + TURN relay for remote access)
- Auto-answer SIP headers for intercom use case
- Authelia SSO for web admin; WEB_ADMIN_AUTH_DISABLED=true when chosen
- UFW rules: 5060-5061, 8080, 8088-8089, 3478, 10000-20000/udp, 49152-49252/udp
- Builds custom Docker image from vendor/easy-asterisk/

nextcloud.sh (utilities):
- Custom Dockerfile: nextcloud:apache + smbclient (SMB external storage)
- MariaDB 10.11 sidecar with matching env vars
- OVERWRITEPROTOCOL/OVERWRITECLIURL/TRUSTED_PROXIES set for Caddy
- Enables files_external app after first-run init (waits up to 90s)

onlyoffice.sh (utilities):
- JWT generated once, preserved across re-runs
- _ensure_yq: auto-installs yq v4 for FileBrowser config patching
- _wire_nextcloud: idempotent occ wiring (DocumentServerUrl, jwt_secret)
- _wire_filebrowser: patches config.yaml + restarts container
- Caddy block overrides X-Frame-Options to allow iframe embedding

mattermost.sh (utilities):
- PostgreSQL 15-alpine + Mattermost Team Edition + coturn (port 3479)
- 8443/udp for Calls plugin RTC server
- coturn uses --use-auth-secret HMAC mode (required by Calls plugin)
- SITE_URL computed from SITE_DOMAIN, promptable
- UFW: 8443/udp, 3479, 49153-49352/udp

vendor/easy-asterisk/:
- All upstream source files vendored for offline/self-contained installs
- Dockerfile, docker/entrypoint.sh, docker/coturn-entrypoint.sh
- easy-asterisk-v0.10.0.sh (6929-line management script)
- scripts/vpn-diagnostics.sh, scripts/dns-whitelist.sh
- .env.example

https://claude.ai/code/session_014CCYqVwW6d6f5dw1qRokYt

vendor/easy-asterisk/Dockerfile

@@ -0,0 +1,60 @@
+FROM ubuntu:24.04
+
+ENV LANG=en_US.UTF-8 \
+    LANGUAGE=en_US:en \
+    LC_ALL=en_US.UTF-8 \
+    DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    asterisk \
+    asterisk-core-sounds-en \
+    asterisk-core-sounds-en-wav \
+    asterisk-moh-opsound-wav \
+    tcpdump \
+    sngrep \
+    curl \
+    dnsutils \
+    iproute2 \
+    net-tools \
+    openssl \
+    python3 \
+    python3-pip \
+    python3-bcrypt \
+    locales \
+    && locale-gen en_US.UTF-8 \
+    && rm -rf /var/lib/apt/lists/*
+
+# NOTE: Opus transcoding (codec_opus.so) is NOT available on Ubuntu 24.04
+# due to a packaging bug. Opus pass-through still works via res_format_attr_opus.so.
+
+RUN mkdir -p /etc/asterisk/certs \
+             /var/lib/asterisk/static-http \
+             /var/log/asterisk \
+             /var/spool/asterisk \
+             /var/run/asterisk \
+    && chown -R asterisk:asterisk \
+             /etc/asterisk \
+             /var/lib/asterisk \
+             /var/log/asterisk \
+             /var/spool/asterisk \
+             /var/run/asterisk
+
+# Management script and helpers
+COPY easy-asterisk-v0.10.0.sh /usr/local/bin/easy-asterisk
+COPY scripts/vpn-diagnostics.sh /usr/local/bin/vpn-diagnostics
+COPY scripts/dns-whitelist.sh /usr/local/bin/dns-whitelist
+COPY docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /usr/local/bin/easy-asterisk \
+             /usr/local/bin/vpn-diagnostics \
+             /usr/local/bin/dns-whitelist \
+             /entrypoint.sh
+
+EXPOSE 5060/udp 5060/tcp 5061/tcp
+EXPOSE 8080/tcp 8088/tcp 8089/tcp
+EXPOSE 3478/udp
+EXPOSE 10000-10100/udp
+
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
+    CMD asterisk -rx "core show version" || exit 1
+
+ENTRYPOINT ["/entrypoint.sh"]