fix: use docker-compose.override.yml for server-specific config

- Remove :ro and network: host from base docker-compose.yml
- Add docker-compose.override.yml.example with network/healthcheck template
- Add docker-compose.override.yml to .gitignore

This allows git pull without conflicts on the server. Server-specific
settings (external networks, healthchecks) go in the override file.

.gitignore

@@ -53,6 +53,7 @@ Thumbs.db
 
 # ── Deployment ───────────────────────────────────────
 .vercel
+docker-compose.override.yml
 
 # ── User Content (personal gallery config) ───────────
 content/settings.yaml

docker-compose.override.yml.example

@@ -0,0 +1,21 @@
+# Copy this file to docker-compose.override.yml and adjust for your server.
+# This file is git-ignored — your local changes won't conflict with pulls.
+#
+# Example: add external network, healthcheck, or other server-specific settings.
+
+services:
+  lightbox:
+    networks:
+      - default
+      - immich_network
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:7211/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+
+networks:
+  immich_network:
+    external: true
+    name: immich-app_default

docker-compose.yml

@@ -2,7 +2,6 @@ services:
   lightbox:
     build:
       context: .
-      network: host
     container_name: immich-folio
     restart: unless-stopped
     ports: