feat: migrate all stacks to Coolify (proxy network, clean labels, pull_policy)

- Remove traefik.enable, traefik.docker.network, traefik.http.routers.* from all services
- Keep traefik.http.services.<name>.loadbalancer.server.port labels
- Keep all middleware definitions (forwardauth, headers, redirects)
- Add pull_policy: always to main/frontend services
- Add proxy network + label to gitea and karakeep (previously missing)
- Add COOLIFY-TEMPLATE.md reference guide

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

trilium/docker-compose.yml

@@ -2,6 +2,7 @@ services:
   trilium:
     image: ${TRILIUM_IMAGE}
     container_name: trilium
+    pull_policy: always
     restart: unless-stopped
     hostname: ${TRILIUM_HOSTNAME}
 
@@ -18,28 +19,8 @@ services:
       - proxy
 
     labels:
-      traefik.enable: "true"
-      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
-    
-      # Router HTTPS - dominio principal
-      traefik.http.routers.trilium.rule: "Host(`${TRILIUM_DOMAIN_1}`)"
-      traefik.http.routers.trilium.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
-      traefik.http.routers.trilium.tls: "true"
-      traefik.http.routers.trilium.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
-    
-      # Router HTTPS - dominio secundario (sin redirección)
-      traefik.http.routers.trilium-alt.rule: "Host(`${TRILIUM_DOMAIN_2}`)"
-      traefik.http.routers.trilium-alt.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
-      traefik.http.routers.trilium-alt.tls: "true"
-      traefik.http.routers.trilium-alt.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
-      traefik.http.routers.trilium-alt.service: "trilium@docker"
-    
-      # Servicio interno
       traefik.http.services.trilium.loadbalancer.server.port: "${TRILIUM_HTTP_PORT}"
-    
-      # Middleware solo de headers (sin Authentik)
-      traefik.http.routers.trilium.middlewares: "trilium-sec@docker"
-    
+
       traefik.http.middlewares.trilium-sec.headers.stsSeconds: "31536000"
       traefik.http.middlewares.trilium-sec.headers.stsIncludeSubdomains: "true"
       traefik.http.middlewares.trilium-sec.headers.stsPreload: "true"
@@ -49,4 +30,3 @@ services:
 networks:
   proxy:
     external: true
-