feat: initial Frigate NVR setup

Dual-stream config (sub for detect, main for live/snapshots),
Intel VAAPI hardware accel, LPR local (YOLOv9 + PaddleOCR),
car/person detection, snapshots 30j retention.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -0,0 +1,32 @@
+services:
+  frigate:
+    container_name: frigate
+    image: ghcr.io/blakeblackshear/frigate:stable
+    restart: unless-stopped
+    shm_size: "256mb"
+    devices:
+      - /dev/dri/renderD128:/dev/dri/renderD128
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - ./config/config.yml:/config/config.yml
+      - ./storage:/media/frigate
+      - ./db:/db
+    ports:
+      - "5000:5000"
+      - "8554:8554"
+      - "8555:8555/tcp"
+      - "8555:8555/udp"
+    environment:
+      FRIGATE_RTSP_PASSWORD: ""
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.frigate.rule=Host(`frigate.nas.percolouco.com`)
+      - traefik.http.routers.frigate.entrypoints=websecure
+      - traefik.http.routers.frigate.tls.certresolver=letsencrypt
+      - traefik.http.services.frigate.loadbalancer.server.port=5000
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true