feat: initial infra repo

- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower)
- install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore
- ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton
- hermes-install: Hermes CLI setup on macOS
- macos-setup: Brewfile + osx-defaults + fish-config
- home-nas-tools: metadata index for NAS projects (no binaries)
- docs: architecture, security, contributing
- README, LICENSE (MIT), .gitignore

docker-services/jswiki/.env.example

@@ -0,0 +1,9 @@
+# Wiki.js – proměnné
+TZ=Europe/Prague
+PUID=1000
+PGID=1000
+
+# MariaDB hesla (ZMĚŇ!)
+MYSQL_ROOT_PASSWORD=change-me-strong
+MYSQL_PASSWORD=change-me-strong
+WIKIJS_DB_PASS=change-me-strong

docker-services/jswiki/README.md

@@ -0,0 +1,54 @@
+# Wiki.js – wiki
+
+> Nejvýkonnější open-source wiki. Markdown, WYSIWYG, DB, fulltext.
+
+## 📋 Přehled
+
+- **Image:** `linuxserver/wikijs:latest`
+- **Port:** `9180` (web)
+- **User:** `1000:1000`
+- **DB:** PostgreSQL/SQLite (zde SQLite pro jednoduchost)
+- **Network:** `bridge`
+
+## 🚀 Instalace
+
+```bash
+cp .env.example .env
+docker compose up -d
+```
+
+Pak `http://<server>:9180` – setup wizard.
+
+## 🎯 Funkce
+
+- **Editor** – WYSIWYG (TinyMCE), Markdown, AsciiDoc
+- **Verzování** – každá stránka má historii
+- **Permissions** – skupiny, ACL
+- **Search** – fulltext
+- **Multi-language**
+- **GraphQL API** – pro integrace
+
+## 📁 Volumes
+
+| Mount | Účel |
+|---|---|
+| `./data:/config` | Wiki.js data, DB, config |
+| `./db:/db` | SQLite databáze |
+
+## 🔐 Bezpečnost
+
+- **Local auth** – nebo LDAP/OAuth
+- **HTTPS** – terminuj v NPM
+- **Rate limiting** – default zapnutý
+
+## 🔄 Aktualizace
+
+```bash
+docker compose pull
+docker compose up -d
+```
+
+## 📚 Dokumentace
+
+- [Wiki.js](https://wiki.js.org/)
+- [GitHub](https://github.com/requarks/wiki)

docker-services/jswiki/docker-compose.yml

@@ -0,0 +1,57 @@
+# Wiki.js
+
+services:
+  db:
+    image: linuxserver/mariadb:latest
+    container_name: jswiki_db
+    restart: unless-stopped
+    volumes:
+      - ./db:/config
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Prague
+      - MYSQL_ROOT_PASSWORD=CHANGE_ME_STRONG
+      - MYSQL_DATABASE=wiki
+      - MYSQL_USER=wiki
+      - MYSQL_PASSWORD=CHANGE_ME_STRONG
+    networks:
+      - jswiki_net
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  wikijs:
+    image: lscr.io/linuxserver/wikijs:latest
+    container_name: wikijs
+    restart: unless-stopped
+    depends_on:
+      - db
+    ports:
+      - "9180:3000"
+    volumes:
+      - ./data:/config
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Prague
+      - WIKIJS_DB_TYPE=mariadb
+      - WIKIJS_DB_HOST=db
+      - WIKIJS_DB_PORT=3306
+      - WIKIJS_DB_USER=wiki
+      - WIKIJS_DB_PASS=CHANGE_ME_STRONG
+      - WIKIJS_DB_NAME=wiki
+    networks:
+      - jswiki_net
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+networks:
+  jswiki_net:
+    name: jswiki_default
+    driver: bridge