feat: initial infra repo

- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower)
- install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore
- ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton
- hermes-install: Hermes CLI setup on macOS
- macos-setup: Brewfile + osx-defaults + fish-config
- home-nas-tools: metadata index for NAS projects (no binaries)
- docs: architecture, security, contributing
- README, LICENSE (MIT), .gitignore

docker-services/jswiki/README.md

@@ -0,0 +1,54 @@
+# Wiki.js – wiki
+
+> Nejvýkonnější open-source wiki. Markdown, WYSIWYG, DB, fulltext.
+
+## 📋 Přehled
+
+- **Image:** `linuxserver/wikijs:latest`
+- **Port:** `9180` (web)
+- **User:** `1000:1000`
+- **DB:** PostgreSQL/SQLite (zde SQLite pro jednoduchost)
+- **Network:** `bridge`
+
+## 🚀 Instalace
+
+```bash
+cp .env.example .env
+docker compose up -d
+```
+
+Pak `http://<server>:9180` – setup wizard.
+
+## 🎯 Funkce
+
+- **Editor** – WYSIWYG (TinyMCE), Markdown, AsciiDoc
+- **Verzování** – každá stránka má historii
+- **Permissions** – skupiny, ACL
+- **Search** – fulltext
+- **Multi-language**
+- **GraphQL API** – pro integrace
+
+## 📁 Volumes
+
+| Mount | Účel |
+|---|---|
+| `./data:/config` | Wiki.js data, DB, config |
+| `./db:/db` | SQLite databáze |
+
+## 🔐 Bezpečnost
+
+- **Local auth** – nebo LDAP/OAuth
+- **HTTPS** – terminuj v NPM
+- **Rate limiting** – default zapnutý
+
+## 🔄 Aktualizace
+
+```bash
+docker compose pull
+docker compose up -d
+```
+
+## 📚 Dokumentace
+
+- [Wiki.js](https://wiki.js.org/)
+- [GitHub](https://github.com/requarks/wiki)