TRUSTED_CACERTS_DIR should also make occ trust additional CA certs in start.sh for nextcloud container

[worldlifedd]

Steps to reproduce

1. Perform manual install with NEXTCLOUD_TRUSTED_CACERTS_DIR set (e.g. /usr/local/share/ca-certificates/my-custom-ca)
2. run 'docker logs manual-install-nextcloud-aio-nextcloud-1'

Expected behavior

Nextcloud server start normally.

Actual behavior

When doing manual install with custom CA certificates (needed by my custom https proxy server), the start script of nextcloud might fail when running some occ commands, e.g.:

cURL error 60: SSL certificate problem: unable to get local issuer certificate
......
The notify_push binary was not found.
......

Possible fix maybe add 'php occ security:certificates:import' command in Containers/nextcloud/start.sh:

# Trust additional Cacerts, if the user provided $TRUSTED_CACERTS_DIR
if [ -n "$TRUSTED_CACERTS_DIR" ]; then
    echo "User required to trust additional CA certificates, running 'update-ca-certificates.'"
    update-ca-certificates
    php /var/www/html/occ security:certificates:import /etc/ssl/certs/ca-certificates.crt
    # or copy certs directly to occ certificate dir
    # cp $TRUSTED_CACERTS_DIR/* $NEXTCLOUD_DATA_DIR/files_external/uploads
fi

Other information

Host OS

Debian 12

Output of sudo docker info

Client: Docker Engine - Community
Version: 28.0.1
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.21.1
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.33.1
Path: /usr/libexec/docker/cli-plugins/docker-compose
......

Docker run command or docker-compose file that you used

As in manual-install.

Other valuable info

[szaimen]

Hi, we could add this but it will not solve the interoperability of the containers itself. This feature was only intended for LDAPS to work correctly out of the box.

See https://github.com/nextcloud/all-in-one?tab=readme-ov-file#are-self-signed-certificates-supported-for-nextcloud

[szaimen]

I've made this a bit more explicit now with d3ac48f