The status checks captured redirected command output, so the csf and firewalld branches never evaluated correctly (firewalld was reported active unconditionally). Use systemctl is-active --quiet instead.
Removes 5 trailing spaces between the value and the # comment on the
PHOTOPRISM_HTTP_COMPRESSION line so it lines up with neighboring
PHOTOPRISM_* entries again. Cosmetic-only follow-up to the zstd
value flip, which left the comment column 5 cols too far right in
the files where the previous spacing was preserved verbatim.
Flips the operator-facing default across all sample compose files,
the Linux package defaults, and the Portainer stack env so QA
exercises zstd end-to-end before the next release. The armv7
samples keep their "none" value to spare the CPU on small devices;
only the comment was broadened.