feat: initial infra repo

- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower)
- install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore
- ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton
- hermes-install: Hermes CLI setup on macOS
- macos-setup: Brewfile + osx-defaults + fish-config
- home-nas-tools: metadata index for NAS projects (no binaries)
- docs: architecture, security, contributing
- README, LICENSE (MIT), .gitignore

docker-services/jswiki/docker-compose.yml

@@ -0,0 +1,57 @@
+# Wiki.js
+
+services:
+  db:
+    image: linuxserver/mariadb:latest
+    container_name: jswiki_db
+    restart: unless-stopped
+    volumes:
+      - ./db:/config
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Prague
+      - MYSQL_ROOT_PASSWORD=CHANGE_ME_STRONG
+      - MYSQL_DATABASE=wiki
+      - MYSQL_USER=wiki
+      - MYSQL_PASSWORD=CHANGE_ME_STRONG
+    networks:
+      - jswiki_net
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+  wikijs:
+    image: lscr.io/linuxserver/wikijs:latest
+    container_name: wikijs
+    restart: unless-stopped
+    depends_on:
+      - db
+    ports:
+      - "9180:3000"
+    volumes:
+      - ./data:/config
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Prague
+      - WIKIJS_DB_TYPE=mariadb
+      - WIKIJS_DB_HOST=db
+      - WIKIJS_DB_PORT=3306
+      - WIKIJS_DB_USER=wiki
+      - WIKIJS_DB_PASS=CHANGE_ME_STRONG
+      - WIKIJS_DB_NAME=wiki
+    networks:
+      - jswiki_net
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+networks:
+  jswiki_net:
+    name: jswiki_default
+    driver: bridge