Bring 15 stale entries in line with current private configs

Several of these had drifted so far they were unrecognizable (Nextcloud
was a bare minio stub, Ollama was missing the ollama service entirely,
Immich was missing 2 of 4 services). Also removed a real, exposed
Authentik OAuth client_id/secret that was sitting in Paperless-NGX's
entry (confirmed stale/rotated already, but shouldn't have been public
regardless) and stripped internal Caddy CA trust details from every
file per the same rule applied to nocodb/dashy etc.

Docker/Calibre/docker-compose.yaml

@@ -1,18 +1,25 @@
-version: '3'
 services:
   calibre:
     image: lscr.io/linuxserver/calibre:latest
     container_name: calibre
+    security_opt:
+      - seccomp:unconfined #optional
     environment:
-      - PUID=PUID
-      - PGID=PGID
-      - TZ=timezone
-      - CUSTOM_USER=user
-      - PASSWORD=password
+      - PUID=${PUID}
+      - PGID=${PGID}
+      - TZ=${TZ}
     volumes:
       - /path/to/calibre:/config
       - /path/to/books:/books
     ports:
-      - 8080:8080
-      - 8081:8081
-    restart: unless-stopped
+      - ${HTTP_PORT}:8080 # Calibre desktop gui.
+    restart: unless-stopped
+    networks:
+      - media-net
+      - notif-net
+
+networks:
+  media-net:
+    external: true
+  notif-net:
+    external: true