Fix critical discrepancies found during validation audit

- Fix cert resolver name (cloudflare -> letsencrypt)
- Fix volume paths (/mnt/nas -> /data)
- Add missing custom port mappings
- Add privileged/capability flags
- Add 8 new roles: portainer, n8n, nodered, influxdb, guacamole, watchtower, rtlamr2mqtt, telegraf
- Fix Traefik template (ports, ACME path, wildcard cert)
- Add extra volume mounts for media services

roles/n8n/defaults/main.yml

@@ -0,0 +1,3 @@
+---
+n8n_compose_dir: "{{ docker_compose_base }}/n8n"
+n8n_image: "docker.n8n.io/n8nio/n8n"

roles/n8n/tasks/main.yml

@@ -0,0 +1,14 @@
+---
+- name: Create n8n compose directory
+  file:
+    path: "{{ n8n_compose_dir }}"
+    state: directory
+- name: Deploy n8n compose file
+  template:
+    src: docker-compose.yml.j2
+    dest: "{{ n8n_compose_dir }}/docker-compose.yml"
+  notify: restart n8n
+- name: Start n8n
+  community.docker.docker_compose_v2:
+    project_src: "{{ n8n_compose_dir }}"
+    state: present

roles/n8n/templates/docker-compose.yml.j2

@@ -0,0 +1,15 @@
+services:
+  n8n:
+    image: {{ n8n_image }}
+    container_name: n8n
+    restart: unless-stopped
+    ports:
+      - "5678:5678"
+    volumes:
+      - /data/n8n:/home/node/.n8n
+    networks:
+      - {{ docker_network_name }}
+
+networks:
+  {{ docker_network_name }}:
+    external: true