Document Nextcloud deployment and Infisical secrets

docs/services.md

@@ -461,6 +461,53 @@ Operational
 
 ---
 
+### Nextcloud
+
+URL:
+
+```text
+https://cloud.silveressence.net
+```
+
+Purpose:
+
+* Private cloud storage
+* File sharing
+* Team document storage
+* Nextcloud notification email
+
+Runtime:
+
+* `nextcloud` using `nextcloud:29-apache`
+* `nextcloud-db` using `postgres:16`
+* `nextcloud-redis` using `redis:7-alpine`
+
+Networks:
+
+* `proxy` for Nginx Proxy Manager access to the web container
+* `nextcloud_nextcloud_internal` for private Nextcloud, PostgreSQL and Redis traffic
+
+Storage:
+
+* `nextcloud_nextcloud_data`
+* `nextcloud_nextcloud_db`
+
+Exposure:
+
+* Routed through Nginx Proxy Manager
+* No Nextcloud stack ports were published to the host in the 2026-07-08 runtime snapshot
+* Database and Redis containers are internal-only
+
+Status:
+
+```text
+Operational
+```
+
+See [docs/nextcloud.md](nextcloud.md) for complete deployment documentation.
+
+---
+
 ### Sentry
 
 URL:
@@ -712,10 +759,10 @@ Running
 
 ### Shared Secrets
 
-Location:
+Source:
 
 ```text
-/srv/secrets/company.env
+Infisical
 ```
 
 Purpose:
@@ -730,6 +777,10 @@ Status:
 Active
 ```
 
+Legacy note:
+
+* `/srv/secrets/company.env` is no longer part of the active secret model and should be removed if it still exists.
+
 ---
 
 ## Removed Services
@@ -760,7 +811,6 @@ Phase 3:
 * SonarQube
 * Harbor
 * Backstage
-* Nextcloud
 
 ---