Hide ONLYOFFICE welcome and example endpoints

ansible/roles/profile_atlas/tasks/nextcloud.yml

@@ -150,6 +150,15 @@
       diff: false
       register: atlas_nextcloud_private_configuration
 
+    - name: Hide ONLYOFFICE welcome and example endpoints without changing editor routes
+      ansible.builtin.template:
+        src: atlas-onlyoffice-access.conf.j2
+        dest: "{{ atlas_nextcloud_private_dir }}/onlyoffice-access.conf"
+        owner: "{{ atlas_admin_username }}"
+        group: "{{ atlas_admin_group }}"
+        mode: "0644"
+      register: atlas_onlyoffice_access_configuration
+
     - name: Download checksum-pinned compatible application releases
       ansible.builtin.get_url:
         url: "{{ item.url }}"
@@ -239,6 +248,7 @@
                  atlas_nextcloud_quadlets.results |
                  selectattr('item', 'equalto', 'atlas-nextcloud.network') |
                  selectattr('changed') | list | length > 0 or
+                 (item == 'atlas-onlyoffice.service' and atlas_onlyoffice_access_configuration is changed) or
                  atlas_nextcloud_private_configuration is changed or
                  atlas_nextcloud_secret_files is changed) else 'started' }}
           loop: "{{ atlas_nextcloud_services }}"

ansible/roles/profile_atlas/templates/atlas-onlyoffice-access.conf.j2

@@ -0,0 +1,8 @@
+# Managed by Ansible; loaded inside the ONLYOFFICE Nginx server block.
+# Return-only server rewrite rules run before the vendor welcome redirect.
+if ($uri = /) {
+  return 404;
+}
+if ($uri ~* "^/([0-9]+\.[0-9]+\.[0-9]+[-.][A-Za-z0-9_-]+/)?(welcome|example)(/|$)") {
+  return 404;
+}

ansible/roles/profile_atlas/templates/atlas-onlyoffice.container.j2

@@ -10,6 +10,8 @@ NetworkAlias=atlas-onlyoffice
 PublishPort={{ ansible_host }}:{{ atlas_onlyoffice_http_port }}:80
 PublishPort=127.0.0.1:{{ atlas_onlyoffice_http_port }}:80
 EnvironmentFile={{ atlas_nextcloud_private_dir }}/onlyoffice.env
+Environment=EXAMPLE_ENABLED=false
+Volume={{ atlas_nextcloud_private_dir }}/onlyoffice-access.conf:/etc/nginx/includes/ds-atlas-access.conf:ro,Z
 Volume={{ atlas_nextcloud_root }}/office/data:/var/www/onlyoffice/Data:Z
 Volume={{ atlas_nextcloud_root }}/office/lib:/var/lib/onlyoffice:Z
 Volume={{ atlas_nextcloud_root }}/office/logs:/var/log/onlyoffice:Z