Initial Ansible automation for hobbs.farm infrastructure

Complete IaC covering:
- 14 roles: common, docker, traefik, vaultwarden, monitoring, media, matrix,
  home_assistant, frigate, adguard, gitea, semaphore, openclaw, security, backup
- Inventory for all hosts (Peggy, Bart, Yoda, NAS, Firewalla)
- Stack playbooks: core-infrastructure, monitoring, media, communication,
  automation, smarthome, security-hardening
- Maintenance playbooks: update-containers, backup, health-check
- Production Docker Compose templates with Traefik labels
- Security hardening (sysctl, auditd, UFW, fail2ban)
- Automated backups with retention policy

playbooks/site.yml

@@ -0,0 +1,71 @@
+---
+# Full site deployment for hobbs.farm
+- name: Apply common configuration
+  hosts: docker_hosts
+  tags: [common]
+  roles:
+    - common
+
+- name: Configure Docker
+  hosts: docker_hosts
+  tags: [docker]
+  roles:
+    - docker
+
+- name: Deploy core infrastructure
+  hosts: peggy
+  tags: [core]
+  roles:
+    - traefik
+    - vaultwarden
+    - adguard
+
+- name: Deploy monitoring stack
+  hosts: peggy
+  tags: [monitoring]
+  roles:
+    - monitoring
+
+- name: Deploy media stack
+  hosts: peggy
+  tags: [media]
+  roles:
+    - media
+
+- name: Deploy communication stack
+  hosts: peggy
+  tags: [communication]
+  roles:
+    - matrix
+
+- name: Deploy smart home stack
+  hosts: peggy
+  tags: [smarthome]
+  roles:
+    - home_assistant
+
+- name: Deploy automation stack
+  hosts: peggy
+  tags: [automation]
+  roles:
+    - gitea
+    - semaphore
+    - openclaw
+
+- name: Deploy Frigate NVR
+  hosts: bart
+  tags: [frigate]
+  roles:
+    - frigate
+
+- name: Apply security hardening
+  hosts: docker_hosts
+  tags: [security]
+  roles:
+    - security
+
+- name: Configure backups
+  hosts: docker_hosts
+  tags: [backup]
+  roles:
+    - backup