FROM nextcloud:latest

RUN apt-get update && \
    apt-get install -y ca-certificates smbclient libsmbclient-dev && \
    pecl install smbclient && \
    docker-php-ext-enable smbclient && \
    rm -rf /var/lib/apt/lists/*

# Internal-zone apps trust the fleet's own internal CA here (cert copied in,
# then update-ca-certificates run) — the actual cert and paths are kept private.
