feat: initial infra repo

- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower)
- install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore
- ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton
- hermes-install: Hermes CLI setup on macOS
- macos-setup: Brewfile + osx-defaults + fish-config
- home-nas-tools: metadata index for NAS projects (no binaries)
- docs: architecture, security, contributing
- README, LICENSE (MIT), .gitignore

docker-services/erugo/.env.example

@@ -0,0 +1,4 @@
+# Erugo – proměnné
+TZ=Europe/Prague
+PUID=1000
+PGID=1000

docker-services/erugo/README.md

@@ -0,0 +1,43 @@
+# Erugo – file sharing
+
+> Jednoduché sdílení souborů s heslem a expirací.
+
+## 📋 Přehled
+
+- **Image:** `wardy784/erugo:latest`
+- **Port:** `61080` (web)
+- **User:** `1000:1000`
+- **Network:** `bridge`
+
+## 🚀 Instalace
+
+```bash
+cp .env.example .env
+docker compose up -d
+```
+
+## 🌐 Přístup
+
+- **Web:** `http://<server>:61080`
+
+## 🎯 Funkce
+
+- **Upload** – drag & drop souborů
+- **Heslo** – volitelné pro každý upload
+- **Expirace** – automatické mazání po X dnech
+- **Linky** – sdílitelné
+- **API** – pro integraci
+
+## 📁 Volumes
+
+| Mount | Účel |
+|---|---|
+| `./data:/uploads` | Uložené soubory |
+| `./db:/db` | SQLite databáze |
+
+## 🔄 Aktualizace
+
+```bash
+docker compose pull
+docker compose up -d
+```

docker-services/erugo/docker-compose.yml

@@ -0,0 +1,28 @@
+# Erugo – file sharing
+
+services:
+  erugo:
+    image: wardy784/erugo:latest
+    container_name: erugo
+    restart: unless-stopped
+    ports:
+      - "61080:80"
+    volumes:
+      - ./data:/uploads
+      - ./db:/db
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Prague
+    networks:
+      - erugo_net
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+networks:
+  erugo_net:
+    name: erugo_default
+    driver: bridge