I did this by installing nextcloud from docker running within a proxmox container. That proxmox lxc container has the nextcloud dataset passed into it.
That's almost what I'm doing (I'm using a VM in Proxmox where I install all my Docker containers).
Right now I'm thinking about encrypt only the data volume (a NFS share from Proxmos host) since all the sensible data will be there.