[IMMICH] Deploy Immich v3 photo server (Google Photos replacement)

- Compose stack at appdata/immich, exposed via Traefik at photos.xtrm-lab.org
- Library on cache NVMe (raidz1), Postgres on cache
- Nightly backup (DB dump + originals rsync) to parity-protected array disk1
- Google Takeout import ready via immich-go v0.32.0

docs/03-SERVICES-OTHER.md

@@ -1,6 +1,6 @@
 # Other Services
 
-**Last Updated:** 2026-06-29
+**Last Updated:** 2026-07-08
 
 Non-critical services that enhance functionality but don't affect core network operation.
 
@@ -102,6 +102,22 @@ Non-critical services that enhance functionality but don't affect core network o
 
 ## Media
 
+### Immich (Photos)
+
+| Component | IP (dockerproxy) | URL |
+|-----------|------------------|-----|
+| immich_server | 172.18.0.132 | https://photos.xtrm-lab.org |
+| immich_machine_learning | (immich_default) | - |
+| immich_postgres | (immich_default) | - (vectorchord) |
+| immich_redis | (immich_default) | - |
+
+**Purpose:** Self-hosted Google Photos replacement (Immich v3)
+**Stack:** docker compose at `/mnt/user/appdata/immich/` (`IMMICH_VERSION=v3`)
+**Access:** Traefik → `photos.xtrm-lab.org` (wildcard cert, no forward-auth so mobile app works) + direct LAN `192.168.10.20:2283`
+**Storage:** library on cache NVMe pool `/mnt/user/photos` (raidz1, redundant, fast); Postgres on cache `appdata/immich/postgres`
+**Backup:** nightly 03:30 (`scripts/immich-backup.sh`, cron `dynamix/immich-backup.cron`) — pg_dumpall (keep 14) + originals rsync → `/mnt/disk1/immich-backup` (array disk1, parity-protected, independent media)
+**Import:** immich-go v0.32.0 at `scripts/` for Google Takeout import (`scripts/import-google-photos.sh`)
+
 ### Plex
 
 | Network | Port | URL |