Bring 15 stale entries in line with current private configs

Several of these had drifted so far they were unrecognizable (Nextcloud
was a bare minio stub, Ollama was missing the ollama service entirely,
Immich was missing 2 of 4 services). Also removed a real, exposed
Authentik OAuth client_id/secret that was sitting in Paperless-NGX's
entry (confirmed stale/rotated already, but shouldn't have been public
regardless) and stripped internal Caddy CA trust details from every
file per the same rule applied to nocodb/dashy etc.

Docker/Vaultwarden/docker-compose.yaml

@@ -1,15 +1,22 @@
 services:
-  bitwarden:
+  vaultwarden:
     image: vaultwarden/server:latest
     container_name: vaultwarden
     restart: always
     ports:
-      - 80:80
+      - ${HTTP_PORT}:80
     volumes:
-      - /path/to/bw-data:/data
+      - /path/to/vaultwarden/bw-data:/data
     environment:
-      - PUID=PUID
-      - PGID=PGID
-      - TZ=timezone
+      - PUID=${PUID}
+      - PGID=${PGID}
+      - TZ=${TZ}
+      - ICON_CACHE_TTL=0
       - WEBSOCKET_ENABLED='true' # Required to use websockets
-      - SIGNUPS_ALLOWED='true'   # set to false to disable signups
+      - SIGNUPS_ALLOWED='true' # set to false to disable signups
+    networks:
+      - vaultwarden-net
+
+networks:
+  vaultwarden-net:
+    external: true