Initial Ansible automation for hobbs.farm infrastructure

Complete IaC covering:
- 14 roles: common, docker, traefik, vaultwarden, monitoring, media, matrix,
  home_assistant, frigate, adguard, gitea, semaphore, openclaw, security, backup
- Inventory for all hosts (Peggy, Bart, Yoda, NAS, Firewalla)
- Stack playbooks: core-infrastructure, monitoring, media, communication,
  automation, smarthome, security-hardening
- Maintenance playbooks: update-containers, backup, health-check
- Production Docker Compose templates with Traefik labels
- Security hardening (sysctl, auditd, UFW, fail2ban)
- Automated backups with retention policy

roles/media/defaults/main.yml

@@ -0,0 +1,27 @@
+---
+media_compose_dir: "{{ docker_compose_base }}/media"
+jellyfin_data_dir: /data/jellyfin
+sonarr_data_dir: /data/sonarr
+radarr_data_dir: /data/radarr
+sabnzbd_data_dir: /data/sabnzbd
+nzbhydra_data_dir: /data/nzbhydra2
+jellyseerr_data_dir: /data/jellyseerr
+
+jellyfin_image: "jellyfin/jellyfin:latest"
+sonarr_image: "lscr.io/linuxserver/sonarr:latest"
+radarr_image: "lscr.io/linuxserver/radarr:latest"
+sabnzbd_image: "lscr.io/linuxserver/sabnzbd:latest"
+nzbhydra_image: "lscr.io/linuxserver/nzbhydra2:latest"
+jellyseerr_image: "fallenbagel/jellyseerr:latest"
+
+media_path: /mnt/nas/media
+downloads_path: /mnt/nas/downloads
+
+jellyfin_host: "jellyfin.{{ domain }}"
+sonarr_host: "sonarr.{{ domain }}"
+radarr_host: "radarr.{{ domain }}"
+sabnzbd_host: "sabnzbd.{{ domain }}"
+jellyseerr_host: "jellyseerr.{{ domain }}"
+
+puid: "1000"
+pgid: "1000"