docs: Update Frigate migration and Traefik config

- Frigate migrated to LXC 128 (Docker) with auth enabled
- Updated IP to 10.4.2.8, port 8971 for authenticated access
- Traefik uses HTTPS backend with insecureSkipVerify for self-signed cert
- Added logrotate for Traefik logs (50MB max, 3 rotations)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docs/CHANGELOG.md

@@ -2,6 +2,58 @@
 
 > **Purpose**: Historical record of all significant infrastructure changes
 
+## 2025-12-15
+
+### Frigate Migration & Upgrade
+- **Frigate**: Migrated from source install (LXC 111) to Docker-based (LXC 128)
+  - Old: LXC 111 on pm3 (source install, 0.14.1)
+  - New: LXC 128 on pm3 (Docker, 0.17.0-beta1)
+  - IP: 10.4.2.8
+  - Domain: frigate.kavcorp.com
+  - Privileged LXC required for USB device passthrough (Coral TPU)
+  - Coral USB TPU successfully passed through
+  - NFS mount for media storage: `/mnt/pve/KavNas/frigate-media`
+
+- **Frigate Configuration Updates**:
+  - Enabled built-in authentication (port 8971)
+  - Updated MQTT to correct Home Assistant IP (10.4.2.199)
+  - Consolidated camera configs using global defaults
+  - Fixed garage stream bug (was using wrong ffmpeg source)
+  - Added stationary car filtering (stops tracking after 30 seconds)
+
+- **Traefik Updates**:
+  - Updated Frigate route to use HTTPS backend (port 8971)
+  - Added serversTransport for self-signed cert (insecureSkipVerify)
+  - Fixed disk full issue (removed 903MB old access log)
+  - Added logrotate config: 50MB max, 3 rotations, daily
+
+### Service Recovery
+- **Power Outage Recovery**: Started all stopped LXCs on pm2, pm3, pm4
+- **VM 109 (docker-pm3)**: Fixed missing onboot setting
+
+### Infrastructure Notes
+- LXC 111 (old Frigate) pending deletion after new setup confirmed
+- Port 5000 on Frigate remains available for Home Assistant integration (unauthenticated)
+- Admin credentials logged on first auth-enabled startup
+
+## 2025-12-08
+
+### Service Configuration
+- **Shinobi (LXC 103)**: Configured NVR storage and Traefik endpoint
+  - Added to Traefik reverse proxy: shinobi.kavcorp.com
+  - Traefik config: `/etc/traefik/conf.d/shinobi.yaml`
+  - Created NFS storage on elantris (`/el-pool/shinobi`) - 11TB available
+  - Added Proxmox NFS storage: `elantris-shinobi`
+  - Mounted NFS to LXC 103: `/opt/Shinobi/videos`
+  - Coral USB TPU device passed through to container
+  - Coral object detection plugin attempted but blocked by TensorFlow Lite unavailability for Ubuntu 24.04/Python 3.12
+  - Motion detection available and working
+
+### Notes
+- Coral TPU native plugin requires building TensorFlow Lite from source, which is complex for Ubuntu 24.04
+- Basic motion detection works out of the box for event recording
+- Object detection may require alternative approach (Frigate, or CPU-based detection)
+
 ## 2025-12-07
 
 ### Service Additions