gerd.nextcloud: only encrypt-all one time, not every time.

machines/gerd/services/nextcloud.nix

@@ -92,7 +92,14 @@ let
     ${occ} encryption:enable
 
     echo "Ensuring everything is encrypted!"
+    if [[ ! -e ${stateDir}/.encrypt-setup ]]; then
+      echo "Running encrypt-all!"
       printf "y\n" | ${occ} encryption:encrypt-all
+      touch ${stateDir}/.encrypt-setup
+    else
+      echo "Encrypt all has already ran, not running again."
+    fi
+  '';
 
   # script for setting up tho storage quota
   # possible to set based on groups