Round 10: Add Traefik routing to monitoring services

- Added Traefik labels and routing to prometheus, grafana, loki, cadvisor
- Fixed Grafana ROOT_URL to use domain-based URL (https://grafana.${DOMAIN})
- Added uptime-kuma bypass rule in Authelia (needs initial setup)
- Updated all services to use traefik-network
- Synced domain from kelin-hass to kelin-casa across all configs
- Fixed missing tls=true label on uptime-kuma
- Note: Loki is API-only service (no web UI, accessed via Grafana)

docker-compose/core/authelia/configuration.yml

@@ -1,6 +1,6 @@
 # Authelia Configuration
 # Copy to /opt/stacks/authelia/configuration.yml
-# IMPORTANT: Replace 'kelin-hass.duckdns.org' with your actual DuckDNS domain
+# IMPORTANT: Replace 'kelin-casa.duckdns.org' with your actual DuckDNS domain
 
 server:
   host: 0.0.0.0
@@ -13,10 +13,10 @@ theme: dark
 
 jwt_secret: ${AUTHELIA_JWT_SECRET}
 
-default_redirection_url: https://auth.kelin-hass.duckdns.org
+default_redirection_url: https://auth.kelin-casa.duckdns.org
 
 totp:
-  issuer: kelin-hass.duckdns.org
+  issuer: kelin-casa.duckdns.org
   period: 30
   skew: 1
 
@@ -36,34 +36,38 @@ access_control:
   
   rules:
     # Bypass Authelia for Jellyfin (allow app access)
-    - domain: jellyfin.kelin-hass.duckdns.org
+    - domain: jellyfin.kelin-casa.duckdns.org
       policy: bypass
     
     # Bypass for Plex (allow app access)
-    - domain: plex.kelin-hass.duckdns.org
+    - domain: plex.kelin-casa.duckdns.org
       policy: bypass
     
     # Bypass for Home Assistant (has its own auth)
-    - domain: ha.kelin-hass.duckdns.org
+    - domain: ha.kelin-casa.duckdns.org
+      policy: bypass
+    
+    # Bypass for Uptime Kuma (has its own auth + needs initial setup)
+    - domain: status.kelin-casa.duckdns.org
       policy: bypass
     
     # Protected: All other services require authentication
-    - domain: "*.kelin-hass.duckdns.org"
+    - domain: "*.kelin-casa.duckdns.org"
       policy: one_factor
     
     # Two-factor for admin services (optional)
     # - domain:
-    #     - "admin.kelin-hass.duckdns.org"
-    #     - "portainer.kelin-hass.duckdns.org"
+    #     - "admin.kelin-casa.duckdns.org"
+    #     - "portainer.kelin-casa.duckdns.org"
     #   policy: two_factor
 
 session:
   name: authelia_session
   secret: ${AUTHELIA_SESSION_SECRET}
-  expiration: 1h
-  inactivity: 5m
+  expiration: 24h      # Session expires after 24 hours
+  inactivity: 24h      # Session expires after 24 hours of inactivity
   remember_me_duration: 1M
-  domain: kelin-hass.duckdns.org
+  domain: kelin-casa.duckdns.org
 
 regulation:
   max_retries: 3