Sync infra config: HA/Zabbix relocation, Immich storage move, new services

Accumulated uncommitted infra changes:
- Caddyfile: repoint HA/Zabbix to 192.168.1.4/.3, add ~20 new site routes
- Immich: move media to /mnt/smsg, enable CUDA ML, mem limits, rewrite backup.sh
- Add service stacks: agap-mcp, anki, family, freshrss, iperf3, kanboard,
  linkwarden, qbittorrent, radicale, syncthing, vikunja, windows
- openwebui: enable API keys; ollama: drop CPU fallback
- seafile/zabbix: extra_hosts entries; matrix: add user juris
- Remove pihole stack and stale wiki/migrate.py
- Ignore marketplace-mcp (standalone repo) and linkwarden runtime data

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

Caddyfile

@@ -1,5 +1,11 @@
+{
+	servers {
+		protocols h1 h2
+	}
+}
+
 haos.alogins.net {
-	reverse_proxy http://192.168.1.141:8123 {
+	reverse_proxy http://192.168.1.4:8123 {
 	
         header_up X-Forwarded-For {remote_host}
         header_up X-Forwarded-Proto {scheme}
@@ -16,7 +22,7 @@ doc.alogins.net {
 }
 
 zb.alogins.net {
-	reverse_proxy localhost:81
+	reverse_proxy 192.168.1.4:81
 }
 
 wiki.alogins.net {
@@ -27,6 +33,10 @@ wiki.alogins.net {
 	}
 }
 
+lt.alogins.net {
+	reverse_proxy localhost:4321
+}
+
 nn.alogins.net {
 	reverse_proxy localhost:5678
 }
@@ -43,12 +53,41 @@ ai.alogins.net {
 	reverse_proxy localhost:3125
 }
 
+news.alogins.net {
+	reverse_proxy localhost:8091
+}
+
+family.alogins.net {
+	reverse_proxy localhost:8099
+}
+
+lw.alogins.net {
+	reverse_proxy localhost:3012
+}
+
+todo.alogins.net {
+	reverse_proxy localhost:3457
+}
+
+ttt.alogins.net {
+	reverse_proxy localhost:3003
+}
+
 openpi.alogins.net {
 	root * /home/alvis/tmp/files/pi05_droid
     	file_server browse
 
 }
 
+dl.alogins.net {
+	@chiefx17 path /chief-x17.zip
+	handle @chiefx17 {
+		root * /mnt/misc/qbittorrent/downloads
+		file_server
+	}
+	respond 404
+}
+
 
 vui3.alogins.net {
     @xhttp {
@@ -69,6 +108,24 @@ vui3.alogins.net {
 	respond 401 
 }
 
+o.alogins.net {
+	handle /api/* {
+		reverse_proxy localhost:3078
+	}
+	handle /admin* {
+		reverse_proxy localhost:3080
+	}
+	handle /mlflow* {
+		reverse_proxy localhost:5000
+	}
+	handle /airflow* {
+		reverse_proxy localhost:8080
+	}
+	handle {
+		reverse_proxy localhost:3079
+	}
+}
+
 vui4.alogins.net {
 	reverse_proxy localhost:58959
 }
@@ -116,6 +173,54 @@ lk.alogins.net {
 	reverse_proxy localhost:7880
 }
 
+lf.alogins.net {
+	reverse_proxy localhost:3200
+}
+
+llm.alogins.net {
+	reverse_proxy localhost:4000
+}
+
+overleaf.alogins.net {
+	reverse_proxy localhost:8089
+}
+
+voice.alogins.net {
+	reverse_proxy localhost:8882
+}
+
+iperf.alogins.net {
+	reverse_proxy localhost:8095
+}
+
+anki.alogins.net {
+	reverse_proxy localhost:8180
+}
+
+kb.alogins.net {
+	reverse_proxy localhost:4800
+}
+
+mood.alogins.net {
+	reverse_proxy localhost:5177
+}
+
+sync.alogins.net {
+	reverse_proxy localhost:8384
+}
+
+dav.alogins.net {
+	reverse_proxy localhost:5232
+}
+
+tor.alogins.net {
+	reverse_proxy localhost:8085
+}
+
+win.alogins.net {
+	reverse_proxy localhost:8006
+}
+
 localhost:8042 {
 	reverse_proxy localhost:8041
     	tls internal