Document Nextcloud deployment and Infisical secrets

docs/email.md

@@ -68,7 +68,7 @@ Login
 SMTP credentials are stored in:
 
 ```text
-/srv/secrets/company.env
+Infisical
 ```
 
 Variables:
@@ -147,6 +147,34 @@ Configured and validated
 
 ---
 
+### Nextcloud
+
+Purpose:
+
+* User notifications
+* File sharing notifications
+* Password and account emails where enabled
+
+Sender:
+
+```text
+noreply@silveressence.net
+```
+
+Observed runtime settings:
+
+```text
+smtp.gmail.com
+port 465
+ssl
+```
+
+Status:
+
+Configured
+
+---
+
 ### Alertmanager
 
 Purpose:
@@ -221,7 +249,7 @@ docker logs gitea
 Verify:
 
 * App password is valid
-* SMTP credentials match company.env
+* SMTP credentials match the Infisical values injected by `slcompose`
 * STARTTLS is enabled
 * Port 587 is used
 
@@ -240,7 +268,7 @@ Verify:
 
 * Use Gmail App Passwords.
 * Never use personal Gmail passwords.
-* Store SMTP credentials only in company.env.
+* Store SMTP credentials only in Infisical.
 * Rotate credentials if they become exposed.
 
 ---