Make opcache core and add APCu for object caching Nextcloud wants APCu for in-memory object caching. Opcache has been "core" since v5.5 (althought we're still importing Zend in one place, so maybe we're not doing it right!)

class my_fw::post {
  firewall { '999 drop all':
    proto   => 'all',
    action  => 'drop',
    before  => undef,
  }
}