Sync infra config: HA/Zabbix relocation, Immich storage move, new services

Accumulated uncommitted infra changes:
- Caddyfile: repoint HA/Zabbix to 192.168.1.4/.3, add ~20 new site routes
- Immich: move media to /mnt/smsg, enable CUDA ML, mem limits, rewrite backup.sh
- Add service stacks: agap-mcp, anki, family, freshrss, iperf3, kanboard,
  linkwarden, qbittorrent, radicale, syncthing, vikunja, windows
- openwebui: enable API keys; ollama: drop CPU fallback
- seafile/zabbix: extra_hosts entries; matrix: add user juris
- Remove pihole stack and stale wiki/migrate.py
- Ignore marketplace-mcp (standalone repo) and linkwarden runtime data

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

freshrss/.env

@@ -0,0 +1,11 @@
+BASE_URL=https://news.alogins.net
+ADMIN_EMAIL=allogn@gmail.com
+ADMIN_PASSWORD=ff221f4d1!
+ADMIN_API_PASSWORD=sfs32003r2
+# Published port if running locally
+PUBLISHED_PORT=8091
+# Database credentials (not relevant if using default SQLite database)
+DB_HOST=freshrss-db
+DB_BASE=freshrss
+DB_PASSWORD=freshrss1945133
+DB_USER=freshrss12

freshrss/docker-compose.yml

@@ -0,0 +1,36 @@
+services:
+  freshrss:
+    image: freshrss/freshrss:latest
+    # # Optional build section if you want to build the image locally:
+    # build:
+    #   # Pick #latest (slow releases) or #edge (rolling release) or a specific release like #1.27.1
+    #   context: https://github.com/FreshRSS/FreshRSS.git#latest
+    #   dockerfile: Docker/Dockerfile-Alpine
+    container_name: freshrss
+    hostname: freshrss
+    restart: unless-stopped
+    ports:
+      # If you want to open a port 8080 on the local machine:
+      - "8091:80"
+    logging:
+      options:
+        max-size: 10m
+    volumes:
+      - /mnt/dbs/freshrss/data:/var/www/FreshRSS/data
+      - /mnt/dbs/freshrss/extensions:/var/www/FreshRSS/extensions
+      - /mnt/dbs/freshrss/db:/var/lib/postgresql
+    environment:
+      POSTGRES_DB: ${DB_BASE:-freshrss}
+      POSTGRES_USER: ${DB_USER:-freshrss}
+      POSTGRES_PASSWORD: ${DB_PASSWORD:-freshrss}
+      TZ: Europe/Moscow
+      CRON_MIN: '3,33'
+      LISTEN: 0.0.0.0:80
+    # Optional healthcheck section:
+    healthcheck:
+      test: ["CMD", "cli/health.php"]
+      timeout: 10s
+      start_period: 60s
+      start_interval: 11s
+      interval: 75s
+      retries: 3