Bring 15 stale entries in line with current private configs

Several of these had drifted so far they were unrecognizable (Nextcloud
was a bare minio stub, Ollama was missing the ollama service entirely,
Immich was missing 2 of 4 services). Also removed a real, exposed
Authentik OAuth client_id/secret that was sitting in Paperless-NGX's
entry (confirmed stale/rotated already, but shouldn't have been public
regardless) and stripped internal Caddy CA trust details from every
file per the same rule applied to nocodb/dashy etc.

Docker/Joplin/docker-compose.yaml

@@ -1,39 +1,56 @@
 services:
   joplin-db:
-    image: postgres:15
+    image: postgres:latest
     container_name: joplin-db
     volumes:
-      - /path/to/data:/var/lib/postgresql/data
+      - /path/to/joplin:/var/lib/postgresql
     ports:
-      - 5432:5432
+      - "${POSTGRES_PORT}:5432"
     restart: unless-stopped
     environment:
-      - POSTGRES_PASSWORD=db_password
-      - POSTGRES_USER=db_user
-      - POSTGRES_DB=joplin
-  
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_DB=${POSTGRES_DB}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+      start_period: 15s
+    networks:
+      - joplin-net
+
   joplin:
     image: joplin/server:latest
     container_name: joplin-server
     depends_on:
       - joplin-db
     ports:
-      - 22300:22300
+      - "${HTTP_PORT}:22300"
     restart: unless-stopped
     environment:
-      - APP_PORT=22300
-      - APP_BASE_URL=https://subdomain.websiteurl.com
+      - APP_PORT=${HTTP_PORT}
+      - APP_BASE_URL=${APP_BASE_URL}
       - DB_CLIENT=pg
-      - POSTGRES_PASSWORD=db_password
-      - POSTGRES_DATABASE=joplin
-      - POSTGRES_USER=db_user
-      - POSTGRES_PORT=5432
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+      - POSTGRES_DATABASE=${POSTGRES_DB}
+      - POSTGRES_USER=${POSTGRES_USER}
+      - POSTGRES_PORT=${POSTGRES_PORT}
       - POSTGRES_HOST=joplin-db
       - MAILER_ENABLED=1
-      - MAILER_HOST=smtp.gmail.com
-      - MAILER_PORT=465
-      - MAILER_SECURE=1
-      - MAILER_AUTH_USER=[email protected]
-      - MAILER_AUTH_PASSWORD=Y0urP@ssw0rd
-      - MAILER_NOREPLY_NAME=Joplin
-      - MAILER_NOREPLY_EMAIL=[email protected]
+      - MAILER_HOST=${MAILER_HOST}
+      - MAILER_PORT=${MAILER_PORT}
+      - MAILER_SECURITY=${MAILER_SECURITY}
+      - MAILER_AUTH_USER=${MAILER_AUTH_USER}
+      - MAILER_AUTH_PASSWORD=${MAILER_AUTH_PASSWORD}
+      - MAILER_NOREPLY_NAME=${MAILER_NOREPLY_NAME}
+      - MAILER_NOREPLY_EMAIL=${MAILER_NOREPLY_EMAIL}
+      - APP_ADMIN_EMAIL=${APP_ADMIN_EMAIL}
+      - APP_ADMIN_PASSWORD=${APP_ADMIN_PASSWORD}
+      - APP_ADMIN_NAME=${APP_ADMIN_NAME}
+    networks:
+      - joplin-net
+
+networks:
+  joplin-net:
+    external: true