feat: initial infra repo

- docker-services: 14 generic compose templates (portainer, npm, vaultwarden, gitea, jotty, nextcloud-aio, rustdesk, audiobookshelf, calibre-web, plex, erugo, jswiki, speedtest, watchtower)
- install-scripts: bash scripts for Ubuntu server bootstrap, docker, portainer, npm, backup, restore
- ansible: 4 playbooks (bootstrap, deploy-services, update-services, security-hardening) + roles skeleton
- hermes-install: Hermes CLI setup on macOS
- macos-setup: Brewfile + osx-defaults + fish-config
- home-nas-tools: metadata index for NAS projects (no binaries)
- docs: architecture, security, contributing
- README, LICENSE (MIT), .gitignore

macos-setup/Brewfile

@@ -0,0 +1,78 @@
+# Brewfile – instalace všech macOS aplikací
+# Tento soubor použij s: brew bundle --file=Brewfile
+# Generováno z produkčního Macu (viz README)
+
+# ───────────── TAPS ─────────────
+tap "homebrew/bundle"
+tap "homebrew/cask"
+tap "homebrew/cask-fonts"
+tap "homebrew/core"
+
+# ───────────── FORMULAS (CLI) ─────────────
+brew "aom"
+brew "bat"
+brew "btop"
+brew "ca-certificates"
+brew "cairo"
+brew "certifi"
+brew "dav1d"
+brew "deno"
+brew "diffutils"
+brew "exiftool"
+brew "eza"
+brew "fastfetch"
+brew "fd"
+brew "ffmpeg"
+brew "fish"
+brew "fontconfig"
+brew "freetype"
+brew "fribidi"
+brew "fzf"
+brew "gettext"
+brew "giflib"
+brew "glib"
+brew "graphite2"
+brew "harfbuzz"
+brew "htop"
+brew "icu4c@78"
+brew "img2pdf"
+brew "jpeg-turbo"
+brew "jq"
+brew "json-c"
+# ... další nainstalované balíky (viz `brew list --formula`)
+
+# ───────────── CASKS (GUI) ─────────────
+cask "alt-tab"
+cask "balenaetcher"
+cask "bartender"
+cask "bitwarden"
+cask "copilot-cli"
+cask "daisydisk"
+cask "discord"
+cask "dockdoor"
+cask "font-meslo-lg-nerd-font"
+cask "google-chrome"
+cask "google-drive"
+cask "keepassxc"
+cask "keepingyouawake"
+cask "keka"
+cask "microsoft-teams"
+cask "nextcloud"
+cask "nextcloud-talk"
+cask "notion"
+cask "nvidia-geforce-now"
+cask "obs"
+cask "obsidian"
+cask "omnidisksweeper"
+cask "qbittorrent"
+cask "rustdesk"
+cask "spotify"
+cask "transmission"
+cask "visual-studio-code"
+cask "vlc"
+cask "whatsapp"
+cask "whichspace"
+# ... další (viz `brew list --cask`)
+
+# ───────────── FONTS ─────────────
+cask "font-meslo-lg-nerd-font"