Run traefik as dockeruser, and without host networking

This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure!

ansible/roles/pve_docker/files/tt-rss/docker-compose.yml

@@ -27,6 +27,9 @@ services:
       - db
     tmpfs:
       - /config/log
+    networks:
+      - default
+      - traefik
 
   db:
     image: postgres:14-alpine
@@ -36,3 +39,7 @@ services:
     environment:
       - POSTGRES_PASSWORD=tt-rss
       - POSTGRES_USER=tt-rss
+
+networks:
+  traefik:
+    external: true