Round 10: Add Traefik routing to monitoring services

- Added Traefik labels and routing to prometheus, grafana, loki, cadvisor
- Fixed Grafana ROOT_URL to use domain-based URL (https://grafana.${DOMAIN})
- Added uptime-kuma bypass rule in Authelia (needs initial setup)
- Updated all services to use traefik-network
- Synced domain from kelin-hass to kelin-casa across all configs
- Fixed missing tls=true label on uptime-kuma
- Note: Loki is API-only service (no web UI, accessed via Grafana)

docker-compose/media.yml

@@ -3,6 +3,11 @@
 # Place in /opt/stacks/media/docker-compose.yml
 # NOTE: qBittorrent is configured to use Gluetun VPN (see gluetun.yml)
 
+# Service Access URLs:
+# - Jellyfin: https://jellyfin.${DOMAIN} (no SSO - app access)
+# - Plex: https://plex.${DOMAIN} (no SSO - app access)
+# - qBittorrent: https://qbit.${DOMAIN} (routed through Gluetun VPN)
+
 services:
   # Jellyfin - Open-source media streaming server
   # Access at: https://jellyfin.yourdomain.duckdns.org
@@ -33,6 +38,7 @@ services:
       - "traefik.enable=true"
       - "traefik.http.routers.jellyfin.rule=Host(`jellyfin.${DOMAIN}`)"
       - "traefik.http.routers.jellyfin.entrypoints=websecure"
+      - "traefik.http.routers.jellyfin.tls=true"
       - "traefik.http.routers.jellyfin.tls.certresolver=letsencrypt"
       - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"