Bring 15 stale entries in line with current private configs

Several of these had drifted so far they were unrecognizable (Nextcloud
was a bare minio stub, Ollama was missing the ollama service entirely,
Immich was missing 2 of 4 services). Also removed a real, exposed
Authentik OAuth client_id/secret that was sitting in Paperless-NGX's
entry (confirmed stale/rotated already, but shouldn't have been public
regardless) and stripped internal Caddy CA trust details from every
file per the same rule applied to nocodb/dashy etc.

Docker/Actual/docker-compose.yaml

@@ -3,16 +3,17 @@ services:
     image: actualbudget/actual-server:latest
     container_name: actual
     ports:
-      - 5006:5006
+      - ${HTTP_PORT}:5006
     environment:
-      - PUID=PUID
-      - PGID=PGID
-      - TZ=timezone
-      # Uncomment any of the lines below to set configuration options.
-      # - ACTUAL_HTTPS_KEY=/data/selfhost.key
-      # - ACTUAL_HTTPS_CERT=/data/selfhost.crt
-      # See all options and more details at https://actualbudget.github.io/docs/Installing/Configuration
-      # !! If you are not using any of these options, remove the 'environment:' tag entirely.
+      - PUID=${PUID}
+      - PGID=${PGID}
+      - TZ=${TZ}
     volumes:
-      - /path/to/actual-data:/data
-    restart: unless-stopped
+      - /path/to/actual/actual-data:/data
+    restart: unless-stopped
+    networks:
+      - actual-net
+
+networks:
+  actual-net:
+    external: true