Standardize labels across remaining stacks - Part 1

- Updated core services (traefik, authelia, sablier) with standardized labels
- Updated monitoring services (prometheus, grafana, cadvisor, uptime-kuma, loki)
- Updated utilities services (duplicati, formio, vaultwarden)
- Updated media management services (sonarr, radarr, prowlarr)
- Updated homeassistant services (esphome)
- Added proper TRAEFIK CONFIGURATION headers and comments
- Maintained service-specific configurations (authelia middleware, vaultwarden SSO disabled)

docker-compose/core/docker-compose.yml

@@ -53,15 +53,20 @@ services:
     networks:
       - traefik-network
     labels:
+      # TRAEFIK CONFIGURATION
+      # ==========================================
+      # Service metadata
+      - "homelab.category=core"
+      - "homelab.description=Reverse proxy and SSL termination"
+      # Traefik reverse proxy (comment/uncomment to disable/enable)
+      # If Traefik is on a remote server: these labels are NOT USED; 
+      #   configure external yml files in /traefik/dynamic folder instead.
       - "traefik.enable=true"
       - "traefik.http.routers.traefik.rule=Host(`traefik.${DOMAIN}`)"
       - "traefik.http.routers.traefik.entrypoints=websecure"
       - "traefik.http.routers.traefik.tls.certresolver=letsencrypt"
       - "traefik.http.routers.traefik.middlewares=authelia@docker"
       - "traefik.http.services.traefik.loadbalancer.server.port=8080"
-      - "homelab.category=dashboards"
-      - "homelab.description=Personal dashboard and service overview"
-      - "x-dockge.url=https://traefik.${DOMAIN}"
 
   authelia:
     # Single sign-on authentication service - must always run for user authentication
@@ -70,6 +75,8 @@ services:
     restart: unless-stopped
     environment:
       - TZ=${TZ}
+    ports:
+      - "9091:9091"
     volumes:
       - ./authelia/config:/config
       - ./authelia/secrets:/secrets
@@ -78,16 +85,24 @@ services:
     depends_on:
       - traefik
     labels:
-      - traefik.enable=true
-      - traefik.http.routers.authelia.rule=Host(`auth.${DOMAIN}`)
-      - traefik.http.routers.authelia.entrypoints=websecure
-      - traefik.http.routers.authelia.tls.certresolver=letsencrypt
-      - traefik.http.routers.authelia.service=authelia
-      - traefik.http.services.authelia.loadbalancer.server.port=9091
-      - traefik.http.middlewares.authelia.forwardauth.address=http://authelia:9091/api/verify?rd=https://auth.${DOMAIN}/
-      - traefik.http.middlewares.authelia.forwardauth.authResponseHeaders=X-Secret
-      - traefik.http.middlewares.authelia.forwardauth.trustForwardHeader=true
-      - x-dockge.url=https://auth.${DOMAIN}
+      # TRAEFIK CONFIGURATION
+      # ==========================================
+      # Service metadata
+      - "homelab.category=core"
+      - "homelab.description=Single sign-on authentication"
+      # Traefik reverse proxy (comment/uncomment to disable/enable)
+      # If Traefik is on a remote server: these labels are NOT USED; 
+      #   configure external yml files in /traefik/dynamic folder instead.
+      - "traefik.enable=true"
+      - "traefik.http.routers.authelia.rule=Host(`auth.${DOMAIN}`)"
+      - "traefik.http.routers.authelia.entrypoints=websecure"
+      - "traefik.http.routers.authelia.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.authelia.service=authelia"
+      - "traefik.http.services.authelia.loadbalancer.server.port=9091"
+      # Authelia forward auth middleware configuration
+      - "traefik.http.middlewares.authelia.forwardauth.address=http://authelia:9091/api/verify?rd=https://auth.${DOMAIN}/"
+      - "traefik.http.middlewares.authelia.forwardauth.authResponseHeaders=X-Secret"
+      - "traefik.http.middlewares.authelia.forwardauth.trustForwardHeader=true"
 
   # Sablier - Lazy loading service for Docker containers
   # Controls startup/shutdown of lazy-loaded services, must always run
@@ -106,8 +121,9 @@ services:
     ports:
       - 10000:10000
     labels:
-      - homelab.category=infrastructure
-      - homelab.description=Lazy loading service for Docker containers
+      # Service metadata
+      - "homelab.category=core"
+      - "homelab.description=Lazy loading service for Docker containers"
 
 networks:
   traefik-network: