SYS-677 immich photo manager

[instantlinux]

Summary of Changes

Adds helm chart to launch immich, a self-hosted Google Photos lookalike. Immich can be hard to install (it took a few days for me to get it figured out); this straightforward helm chart provides answers to most of the questions that came up for me during my installation.

A few other housekeeping items in the repo:

• Fix typo in the kubeadm-config rules
• Reduce log chattiness of ntpd-rs
• Make luks_volume_additions consistent with some of the other ansible playbooks.
• Address security vulnerability reported in samba and samba-dc images: issue ETA for Samba 4.22.9 #281
• Update images: dhcpd-dns-pxe, haproxy-keepalived, mysqldump, nut-upsd, proftpd
• Bump third-party image versions in helm charts: gitea, nextcloud, nexus, restic, vaultwarden
• Update trivy scanner to 0.70.0

Why is this change being made?

Nextcloud has been frustrating to maintain, and its UI and app support have fallen behind rival immich.

Meanwhile, a plethora of vulnerabilities were announced requiring patch updates across several other images.

How was this tested? How can the reviewer verify your testing?

Immich: manual testing, on a system that serves about a quarter-million images/videos.

Vulnerabilities: Local and CI testing

Completion checklist

• The pull request is linked to all related issues
• This change has unit test coverage
• Documentation has been updated
• Dependencies have been updated and verified