Deploy Talk HPB/client push and document rollout steps

Add compose/nginx/env changes for Talk HPB + notify_push integration, and document deployment + hardening commands in README.

Co-Authored-By: Oz <oz-agent@warp.dev>

docker-compose.yml

@@ -74,6 +74,45 @@ services:
     networks:
       - nextcloud-net
 
+  talk-hpb:
+    image: ghcr.io/nextcloud-releases/aio-talk:latest
+    container_name: nextcloud-talk-hpb
+    restart: unless-stopped
+    environment:
+      - NC_DOMAIN=nxt.bhatfamily.in:8446
+      - TALK_HOST=nxt.bhatfamily.in
+      - TALK_PORT=3478
+      - TURN_SECRET=${TALK_TURN_SECRET}
+      - SIGNALING_SECRET=${TALK_SIGNALING_SECRET}
+      - INTERNAL_SECRET=${TALK_INTERNAL_SECRET}
+      - TZ=UTC
+    ports:
+      - "3478:3478/tcp"
+      - "3478:3478/udp"
+    networks:
+      - nextcloud-net
+
+  notify-push:
+    image: nextcloud:apache
+    container_name: nextcloud-notify-push
+    restart: unless-stopped
+    user: "www-data"
+    command:
+      - /bin/sh
+      - -c
+      - |
+        exec /var/www/html/custom_apps/notify_push/bin/$(uname -m)/notify_push /var/www/html/config/config.php
+    environment:
+      - NEXTCLOUD_URL=http://nextcloud-app
+    depends_on:
+      - app
+      - redis
+    volumes:
+      - nextcloud_data:/var/www/html
+      - /media/rbhat/DATA/nextcloud/NextCloudData:/var/www/html/data
+    networks:
+      - nextcloud-net
+
   web:
     image: nginx:1.25-alpine
     container_name: nextcloud-web
@@ -87,6 +126,8 @@ services:
       - nextcloud_data:/var/www/html:ro
     depends_on:
       - app
+      - talk-hpb
+      - notify-push
     networks:
       - nextcloud-net