diff --git a/common/.bashrc b/common/.bashrc
index 7597836..64c2bd9 100644
--- a/common/.bashrc
+++ b/common/.bashrc
@@ -93,5 +93,12 @@ lk(){
 	&& recsel "$DB" -q "$query" | recfmt -f "$HOME/projects/dmz/soft/lk/lists.fmt" | less
 }
 
+# Keepassxc search
+kp() {
+  local DB="${KP_DB:?Error: KP_DB environment variable is not set. Check .bash_profile.}"
+  read -sp "Enter db password: " pass; echo ""; printf '%s\n' "$pass" | keepassxc-cli ls -q -R "$DB" | fzf | (read -r entry; printf '%s\n' "$pass" | keepassxc-cli clip -q "$DB" "$entry" 0)
+}
+
 # Per-host extras
 [ -f ~/.bashrc.host ] && . ~/.bashrc.host
+
diff --git a/common/.config/aichat/config.yaml b/common/.config/aichat/config.yaml
index 9f89cc3..ffa3118 100644
--- a/common/.config/aichat/config.yaml
+++ b/common/.config/aichat/config.yaml
@@ -47,7 +47,8 @@ clients:
     max_input_tokens: 62000            # ctx 65536
   - name: gpt-oss-20b-low
     max_input_tokens: 62000            # ctx 65536
-# Remote access via duskadiy.com (reachable from anywhere; no key required)
+# Remote access via duskadiy.com (reachable from anywhere; requires an API key —
+# $DUSKADIY_API_KEY, from the gitignored conf.d/secrets.fish). The LAN endpoint above is keyless.
 # Same server, same model ids — reuse the list above via a YAML anchor.
 - type: openai-compatible
   name: duskadiy
diff --git a/common/.config/fish/config.fish b/common/.config/fish/config.fish
index 707324a..7db692e 100644
--- a/common/.config/fish/config.fish
+++ b/common/.config/fish/config.fish
@@ -52,8 +52,6 @@ alias cdots="cd ~/.dots/"
 alias cpnotes="cd ~/sync/PersonalNotes/"
 alias cnotes="cd ~/sync/CojaDuska/Notes/"
 abbr notes "cnotes && nvim"
-abbr wnotes "cd ~/sync/Wingman/notes && nvim"
-abbr wtodo "cd ~/sync/Wingman/notes/wm-client/ && nvim todo.md"
 abbr dots "cdots && nvim"
 abbr dotsync "cdots && ./bin/dotsync"
 abbr pnotes "cpnotes && nvim"
diff --git a/fl/.config/llamacpp/README.md b/fl/.config/llamacpp/README.md
index 90218ce..5d9657c 100644
--- a/fl/.config/llamacpp/README.md
+++ b/fl/.config/llamacpp/README.md
@@ -7,7 +7,7 @@ Last full clean sweep: **2026-08-08 03:22** — all 11 presets loaded and ran gr
 - **Box**: AMD RX 7600 XT 16 GB (ROCm, ~288 GB/s) + Ryzen 5600X (6 cores) + 48 GB RAM.
   ⚠ The GPU **also drives the display** — see [VRAM safety](#vram-safety-the-golden-rules).
 - **Endpoints**: LAN `http://$SERVER:11343/v1` · remote `https://<own-domain>/api/v1`
-  (own reverse proxy to the same server; keyless — put auth in front before exposing it).
+  (own reverse proxy to the same server; requires an API key. Only the LAN endpoint is keyless).
   `$SERVER` = the box's LAN address.
 - **Files here**: `config.ini` (model presets — the section names ARE the API model ids),
   `bench.py` (safety-first benchmark), `bench-results.md` / `bench-history.md` (ledgers, generated).
diff --git a/lw/.config/aichat/config.yaml b/lw/.config/aichat/config.yaml
index b0be7b6..86ca9b4 100644
--- a/lw/.config/aichat/config.yaml
+++ b/lw/.config/aichat/config.yaml
@@ -73,7 +73,8 @@ clients:
     max_input_tokens: 62000            # ctx 65536
   - name: gpt-oss-20b-low
     max_input_tokens: 62000            # ctx 65536
-# Remote access via duskadiy.com (reachable from anywhere; no key required)
+# Remote access via duskadiy.com (reachable from anywhere; requires an API key —
+# $DUSKADIY_API_KEY, from the gitignored conf.d/secrets.fish). The LAN endpoint above is keyless.
 # Same server, same model ids — reuse the list above via a YAML anchor.
 - type: openai-compatible
   name: duskadiy