feat(neovim): enable on tako device

feat(authelia): configure port and reverse proxy
feat(lldap): force password reset and update settings
fix(nixos): remove root from trusted users on ryu and tako
fix(immich): disable auto launch and enable password login
refactor(tako): enable authelia, immich, and lldap services
chore(secrets): update lldap seed and metadata timestamps

nixos/tako/services/immich.nix

@@ -26,14 +26,14 @@
                 "clientId": "${config.sops.placeholder."authelia/oidc/immich/client_id"}",
                 "clientSecret": "${config.sops.placeholder."authelia/oidc/immich/client_secret"}",
                 "enabled": true,
-                "autoLaunch": true,
+                "autoLaunch": false,
                 "autoRegister": true,
                 "buttonText": "Login with Authelia",
                 "scope": "openid email profile",
                 "issuerUrl": "https://auth.darksailor.dev"
               },
               "passwordLogin" : {
-                "enabled": false
+                "enabled": true
               },
               "server": {
                 "externalDomain": "https://photos.darksailor.dev"