userdata layout: repoint customer-content mounts to ${USERDATA_PATH}

Move every shared-media + ingest mount off ${HDD_PATH}/media onto the new
${USERDATA_PATH}/... convention (controller injects USERDATA_PATH = <namespace>/userdata):
- jellyfin/emby/plex: media:/media:ro ; navidrome: media/music:ro
- audiobookshelf (user 1000:1000): media/{audiobooks,podcasts}
- komga (user 1000:1000): media/comics
- calibre-web (UMASK=002): library->media/books, ingest->import/calibre
- radarr/sonarr (UMASK=002): media/{movies,tv} + downloads (sibling, same FS)
- romm: ROM library -> userdata/roms (browsable); resources stay in appdata
- immich: + external library media/photos:/external/photos:ro (registration is a
  post-deploy admin step — flagged in compose + .felhom.yml)
- paperless: consume -> import/paperless (USERMAP 1000)
- nextcloud: unchanged (fully app-managed)
.felhom.yml first_steps updated for the new browsable drop-zones.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

templates/immich/.felhom.yml

@@ -69,6 +69,11 @@ app_info:
     - 'Telepítsd az Immich alkalmazást a telefonodra (Android/iOS)'
     - 'Állítsd be az automatikus feltöltést az alkalmazásban'
     - 'Hívd meg a családtagokat külön fiókokkal'
+    # MOUNT-READY, REGISTRATION PENDING: a megosztott média/photos mappa be van csatolva
+    # /external/photos néven (csak olvasható), de az Immich CSAK akkor látja, ha az
+    # adminfelületen (Administration → External Libraries) regisztrálod a /external/photos
+    # útvonalat. Compose ezt NEM teszi meg automatikusan — ez egy telepítés utáni lépés.
+    - 'Külső könyvtár (opcionális): Administration → External Libraries → add /external/photos'
 
   prerequisites:
     - 'Külső HDD szükséges a fotók és videók tárolásához'

templates/immich/docker-compose.yml

@@ -5,17 +5,25 @@
 #
 # Environment variables:
 #   DOMAIN          - Your domain (e.g., demo-felhom.eu)
-#   HDD_PATH        - HDD mount path (e.g., /mnt/hdd_1)
+#   HDD_PATH        - Drive namespace root (managed upload lives under appdata)
+#   USERDATA_PATH   - Ügyfél-tartalom gyökér (<namespace>/userdata)
 #   DB_PASSWORD     - PostgreSQL password (auto-generated)
 #
-# Storage layout:
-#   User photos/videos → ${HDD_PATH}/appdata/immich  (HDD, host path)
-#   PostgreSQL data    → immich_postgres_data          (named volume, NVMe)
-#   ML model cache     → immich_ml_cache               (named volume, NVMe)
-#   Redis data         → immich_redis_data             (named volume, NVMe)
+# Storage layout (felhom userdata convention):
+#   Managed upload (Immich-owned) → ${HDD_PATH}/appdata/immich   (HDD, host path — app-managed)
+#   External photo library (RO)   → ${USERDATA_PATH}/media/photos → /external/photos
+#   PostgreSQL data    → immich_postgres_data   (named volume, NVMe)
+#   ML model cache     → immich_ml_cache         (named volume, NVMe)
+#   Redis data         → immich_redis_data       (named volume, NVMe)
+#
+# ⚠ EXTERNAL LIBRARY IS NOT WIRED BY COMPOSE: mounting /external/photos only makes the files
+#   visible to the container. To actually surface them in Immich you MUST register an External
+#   Library pointing at /external/photos in the Immich admin UI (Administration → External
+#   Libraries) or via the API — a POST-DEPLOY step. Until then photos sharing is "mount ready,
+#   registration pending". See .felhom.yml first_steps + REPORT.
 #
 # First-time setup:
-#   Create admin account on first visit.
+#   Create admin account on first visit, then register the External Library (see above).
 
 services:
   immich-server:
@@ -37,6 +45,7 @@ services:
       - TZ=Europe/Budapest
     volumes:
       - ${HDD_PATH}/appdata/immich:/usr/src/app/upload
+      - ${USERDATA_PATH}/media/photos:/external/photos:ro
     networks:
       - traefik-public
       - immich-internal