Immich photo management. 4 containers (server, ML with CUDA GPU, postgres, redis). Fixed restart:always to unless-stopped. Logging + no-new-privileges applied. Path: ~/prod/immich/