ansible playbook composes 4 playbooks:
1. `provision`: installs packages, creates accounts, does basic ssh
  hardening
2. `deploy`: installs docker and spins up nextcloud + onlyoffice
containers behind nginx proxies w/ letsencrypt support
3. `configure`: configures nextcloud/onlyoffice accounts and network
settings
4. `harden` performs comprehensive os hardening

TODO: fix `run` steps in `deploy` and `configure`