Reorganize docker-compose stacks for better service grouping

Stack changes:
- Renamed media-extended.yml → media-management.yml (better clarity)
- Moved Plex from media → alternatives (Jellyfin is primary)
- Moved code-server from utilities → infrastructure
- Moved Sonarr, Radarr, Prowlarr from media → media-management
- Moved Calibre-web from media-management → media

New stack organization:
- media.yml (3): Jellyfin, Calibre-web, qBittorrent
- media-management.yml (13): All *arr apps, transcoders
- alternatives.yml (6): Plex, Portainer, Authentik
- infrastructure.yml (7): Added code-server
- utilities.yml (6): Removed code-server

Documentation updated:
- README.md: Updated stack descriptions
- services-overview.md: Updated service counts and locations
- All service docs: Updated file paths media-extended → media-management

docker-compose/media.yml

@@ -4,55 +4,7 @@
 # NOTE: qBittorrent is configured to use Gluetun VPN (see gluetun.yml)
 
 services:
-  # Plex Media Server - Media streaming platform
-  # Access at: https://plex.yourdomain.duckdns.org
-  # NOTE: No Authelia - allows app access from Roku, Fire TV, mobile, etc.
-  plex:
-    image: plexinc/pms-docker:1.40.0.7998-f68041501
-    container_name: plex
-    restart: unless-stopped
-    networks:
-      - media-network
-      - homelab-network
-      - traefik-network
-    volumes:
-      - ./plex/config:/config
-      - /mnt/media:/media:ro  # Large media files on separate drive
-      - plex-transcode:/transcode
-    environment:
-      - PUID=${PUID:-1000}
-      - PGID=${PGID:-1000}
-      - TZ=${TZ:-America/New_York}
-      - PLEX_CLAIM=${PLEX_CLAIM}
-    # Hardware transcoding support
-    # Uncomment ONE of the following options:
-    
-    # Option 1: Intel QuickSync (most common)
-    # devices:
-    #   - /dev/dri:/dev/dri
-    
-    # Option 2: NVIDIA GPU (requires nvidia-container-toolkit installed)
-    # runtime: nvidia
-    # devices:
-    #   - /dev/nvidia0:/dev/nvidia0
-    #   - /dev/nvidiactl:/dev/nvidiactl
-    #   - /dev/nvidia-modeset:/dev/nvidia-modeset
-    #   - /dev/nvidia-uvm:/dev/nvidia-uvm
-    #   - /dev/nvidia-uvm-tools:/dev/nvidia-uvm-tools
-    # environment:
-    #   - NVIDIA_VISIBLE_DEVICES=all
-    #   - NVIDIA_DRIVER_CAPABILITIES=compute,video,utility
-    labels:
-      - "homelab.category=media"
-      - "homelab.description=Plex media streaming server"
-      # Traefik labels - NO Authelia for app access
-      - "traefik.enable=true"
-      - "traefik.http.routers.plex.rule=Host(`plex.${DOMAIN}`)"
-      - "traefik.http.routers.plex.entrypoints=websecure"
-      - "traefik.http.routers.plex.tls.certresolver=letsencrypt"
-      - "traefik.http.services.plex.loadbalancer.server.port=32400"
-
-  # Jellyfin - Free alternative to Plex
+  # Jellyfin - Open-source media streaming server
   # Access at: https://jellyfin.yourdomain.duckdns.org
   # NOTE: No Authelia - allows app access from Roku, Fire TV, mobile, etc.
   jellyfin:
@@ -84,90 +36,33 @@ services:
       - "traefik.http.routers.jellyfin.tls.certresolver=letsencrypt"
       - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"
 
-  # Sonarr - TV show automation
-  # Access at: https://sonarr.yourdomain.duckdns.org
-  sonarr:
-    image: lscr.io/linuxserver/sonarr:4.0.0
-    container_name: sonarr
+  # Calibre-Web - Ebook reader and server
+  # Access at: https://calibre.${DOMAIN}
+  calibre-web:
+    image: lscr.io/linuxserver/calibre-web:latest
+    container_name: calibre-web
     restart: unless-stopped
     networks:
       - media-network
       - homelab-network
       - traefik-network
     volumes:
-      - ./sonarr/config:/config
-      - /mnt/media:/media
-      - /mnt/downloads:/downloads  # Large downloads on separate drive
+      - ./calibre-web/config:/config
+      - /mnt/media/books:/books
     environment:
       - PUID=${PUID:-1000}
       - PGID=${PGID:-1000}
       - TZ=${TZ:-America/New_York}
+      - DOCKER_MODS=linuxserver/mods:universal-calibre
     labels:
       - "homelab.category=media"
-      - "homelab.description=TV show management and automation"
-      # Traefik labels with Authelia
+      - "homelab.description=Ebook reader and library management"
       - "traefik.enable=true"
-      - "traefik.http.routers.sonarr.rule=Host(`sonarr.${DOMAIN}`)"
-      - "traefik.http.routers.sonarr.entrypoints=websecure"
-      - "traefik.http.routers.sonarr.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.sonarr.middlewares=authelia@docker"
-      - "traefik.http.services.sonarr.loadbalancer.server.port=8989"
-
-  # Radarr - Movie automation
-  # Access at: https://radarr.yourdomain.duckdns.org
-  radarr:
-    image: lscr.io/linuxserver/radarr:5.2.6
-    container_name: radarr
-    restart: unless-stopped
-    networks:
-      - media-network
-      - homelab-network
-      - traefik-network
-    volumes:
-      - ./radarr/config:/config
-      - /mnt/media:/media
-      - /mnt/downloads:/downloads  # Large downloads on separate drive
-    environment:
-      - PUID=${PUID:-1000}
-      - PGID=${PGID:-1000}
-      - TZ=${TZ:-America/New_York}
-    labels:
-      - "homelab.category=media"
-      - "homelab.description=Movie management and automation"
-      # Traefik labels with Authelia
-      - "traefik.enable=true"
-      - "traefik.http.routers.radarr.rule=Host(`radarr.${DOMAIN}`)"
-      - "traefik.http.routers.radarr.entrypoints=websecure"
-      - "traefik.http.routers.radarr.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.radarr.middlewares=authelia@docker"
-      - "traefik.http.services.radarr.loadbalancer.server.port=7878"
-
-  # Prowlarr - Indexer manager
-  # Access at: https://prowlarr.yourdomain.duckdns.org
-  prowlarr:
-    image: lscr.io/linuxserver/prowlarr:1.11.4
-    container_name: prowlarr
-    restart: unless-stopped
-    networks:
-      - media-network
-      - homelab-network
-      - traefik-network
-    volumes:
-      - ./prowlarr/config:/config
-    environment:
-      - PUID=${PUID:-1000}
-      - PGID=${PGID:-1000}
-      - TZ=${TZ:-America/New_York}
-    labels:
-      - "homelab.category=media"
-      - "homelab.description=Indexer manager for Sonarr/Radarr"
-      # Traefik labels with Authelia
-      - "traefik.enable=true"
-      - "traefik.http.routers.prowlarr.rule=Host(`prowlarr.${DOMAIN}`)"
-      - "traefik.http.routers.prowlarr.entrypoints=websecure"
-      - "traefik.http.routers.prowlarr.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.prowlarr.middlewares=authelia@docker"
-      - "traefik.http.services.prowlarr.loadbalancer.server.port=9696"
+      - "traefik.http.routers.calibre.rule=Host(`calibre.${DOMAIN}`)"
+      - "traefik.http.routers.calibre.entrypoints=websecure"
+      - "traefik.http.routers.calibre.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.calibre.middlewares=authelia@docker"
+      - "traefik.http.services.calibre.loadbalancer.server.port=8083"
 
   # qBittorrent - Torrent client
   # Access at: https://qbit.yourdomain.duckdns.org
@@ -175,10 +70,6 @@ services:
   # NOTE: This is a placeholder. Configure qBittorrent in gluetun.yml with network_mode: "service:gluetun"
   # See gluetun.yml for the actual qBittorrent configuration
 
-volumes:
-  plex-transcode:
-    driver: local
-
 networks:
   media-network:
     driver: bridge