Refactor Docker Swarm stack configurations for local deployment

Updated multiple stack files to use local hostnames instead of external domains, simplified Traefik configuration, and reorganized Authentik service location. Changes improve local development setup and reduce complexity.

Key changes:
- Simplified .gitignore to exclude entire conf/ directory
- Updated Traefik labels across services to use .swarm.home domains
- Removed Cloudflare cert resolver references for local TLS
- Moved Authentik from apps/ to core/ directory structure
- Removed Traefik labels from n8n and paperless services
- Updated Traefik stack to use simplified port bindings
- Added timezone environment variable to adminer and outline

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

stacks/core/traefik/stack.yml

@@ -1,27 +1,18 @@
 services:
   traefik:
-    image: traefik:v3.5
+    image: traefik:v3.5.4
     # Remove all command arguments - using static config file instead
     ports:
-    - target: 80
-      published: 80
-      mode: host
-    - target: 443
-      published: 443
-      mode: host
-    - target: 8443
-      published: 8443
-      mode: host
-    - target: 8080
-      published: 8082
-      mode: host
+    - 80:80
+    - 443:443
+    - 8080:8080
     environment:
     - CF_DNS_API_TOKEN_FILE=/run/secrets/cloudflare_api_token
     volumes:
     - /var/run/docker.sock:/var/run/docker.sock:ro
-    - /home/doc/projects/swarm-data/appdata/traefik/certificates:/certificates
+    #
     - /home/doc/projects/swarm/conf/traefik-conf/static.yml:/etc/traefik/traefik.yml:ro
-    - /home/doc/projects/swarm/conf/traefik-conf/dynamic.yml:/etc/traefik/dynamic/dynamic.yml:ro
+    - /home/doc/projects/swarm/conf/traefik-conf/dynamic.yml:/etc/traefik/dynamic/dynamic.yml:rw
     secrets:
     - cloudflare_api_token
     networks:
@@ -37,20 +28,7 @@ services:
       replicas: 1
       placement:
         constraints:
-        - node.hostname == p0
-      resources:
-        limits:
-          memory: 512M
-          cpus: '0.5'
-        reservations:
-          memory: 256M
-      labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.traefik.rule=Host(`proxy.frostlabs.me`)"
-      - "traefik.http.routers.traefik.entrypoints=websecure"
-      - "traefik.http.routers.traefik.tls.certresolver=cloudflare"
-      - "traefik.http.routers.traefik.service=api@internal"
-      - "traefik.http.services.traefik.loadbalancer.server.port=8080"
+          - node.hostname == p0
 
 networks:
   homelab: