feat: initial infra repo

- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower)
- install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore
- ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton
- hermes-install: Hermes CLI setup on macOS
- macos-setup: Brewfile + osx-defaults + fish-config
- home-nas-tools: metadata index for NAS projects (no binaries)
- docs: architecture, security, contributing
- README, LICENSE (MIT), .gitignore

ansible/playbooks/update-services.yml

@@ -0,0 +1,22 @@
+---
+# Update všech Docker služeb (docker compose pull + up -d)
+#
+# Použití:
+#   ansible-playbook -i inventory.yml playbooks/update-services.yml
+#
+- name: Update Docker services
+  hosts: homeservers
+  become: true
+
+  vars:
+    services_path: "/home/{{ docker_user }}/docker-services"
+    services: "{{ services_to_deploy | default([]) }}"
+
+  tasks:
+    - name: Pull and restart services
+      community.docker.docker_compose_v2:
+        project_src: "{{ services_path }}/{{ item }}"
+        state: present
+        pull: always
+      loop: "{{ services }}"
+      become_user: "{{ docker_user }}"