Fix critical discrepancies found during validation audit

- Fix cert resolver name (cloudflare -> letsencrypt)
- Fix volume paths (/mnt/nas -> /data)
- Add missing custom port mappings
- Add privileged/capability flags
- Add 8 new roles: portainer, n8n, nodered, influxdb, guacamole, watchtower, rtlamr2mqtt, telegraf
- Fix Traefik template (ports, ACME path, wildcard cert)
- Add extra volume mounts for media services

roles/media/defaults/main.yml

@@ -4,7 +4,7 @@ jellyfin_data_dir: /data/jellyfin
 sonarr_data_dir: /data/sonarr
 radarr_data_dir: /data/radarr
 sabnzbd_data_dir: /data/sabnzbd
-nzbhydra_data_dir: /data/nzbhydra2
+nzbhydra_data_dir: /data/hydra
 jellyseerr_data_dir: /data/jellyseerr
 
 jellyfin_image: "jellyfin/jellyfin:latest"
@@ -14,8 +14,8 @@ sabnzbd_image: "lscr.io/linuxserver/sabnzbd:latest"
 nzbhydra_image: "lscr.io/linuxserver/nzbhydra2:latest"
 jellyseerr_image: "fallenbagel/jellyseerr:latest"
 
-media_path: /mnt/nas/media
-downloads_path: /mnt/nas/downloads
+media_path: /data/media
+downloads_path: /data/media/downloads
 
 jellyfin_host: "jellyfin.{{ domain }}"
 sonarr_host: "sonarr.{{ domain }}"