[Docs] the remote endpoint requires a key; drop work paths from common

common/.bashrc

@@ -93,5 +93,12 @@ lk(){
 	&& recsel "$DB" -q "$query" | recfmt -f "$HOME/projects/dmz/soft/lk/lists.fmt" | less
 }
 
+# Keepassxc search
+kp() {
+  local DB="${KP_DB:?Error: KP_DB environment variable is not set. Check .bash_profile.}"
+  read -sp "Enter db password: " pass; echo ""; printf '%s\n' "$pass" | keepassxc-cli ls -q -R "$DB" | fzf | (read -r entry; printf '%s\n' "$pass" | keepassxc-cli clip -q "$DB" "$entry" 0)
+}
+
 # Per-host extras
 [ -f ~/.bashrc.host ] && . ~/.bashrc.host
+

common/.config/aichat/config.yaml

@@ -47,7 +47,8 @@ clients:
     max_input_tokens: 62000            # ctx 65536
   - name: gpt-oss-20b-low
     max_input_tokens: 62000            # ctx 65536
-# Remote access via duskadiy.com (reachable from anywhere; no key required)
+# Remote access via duskadiy.com (reachable from anywhere; requires an API key —
+# $DUSKADIY_API_KEY, from the gitignored conf.d/secrets.fish). The LAN endpoint above is keyless.
 # Same server, same model ids — reuse the list above via a YAML anchor.
 - type: openai-compatible
   name: duskadiy

common/.config/fish/config.fish

@@ -52,8 +52,6 @@ alias cdots="cd ~/.dots/"
 alias cpnotes="cd ~/sync/PersonalNotes/"
 alias cnotes="cd ~/sync/CojaDuska/Notes/"
 abbr notes "cnotes && nvim"
-abbr wnotes "cd ~/sync/Wingman/notes && nvim"
-abbr wtodo "cd ~/sync/Wingman/notes/wm-client/ && nvim todo.md"
 abbr dots "cdots && nvim"
 abbr dotsync "cdots && ./bin/dotsync"
 abbr pnotes "cpnotes && nvim"

fl/.config/llamacpp/README.md

@@ -7,7 +7,7 @@ Last full clean sweep: **2026-08-08 03:22** — all 11 presets loaded and ran gr
 - **Box**: AMD RX 7600 XT 16 GB (ROCm, ~288 GB/s) + Ryzen 5600X (6 cores) + 48 GB RAM.
   ⚠ The GPU **also drives the display** — see [VRAM safety](#vram-safety-the-golden-rules).
 - **Endpoints**: LAN `http://$SERVER:11343/v1` · remote `https://<own-domain>/api/v1`
-  (own reverse proxy to the same server; keyless — put auth in front before exposing it).
+  (own reverse proxy to the same server; requires an API key. Only the LAN endpoint is keyless).
   `$SERVER` = the box's LAN address.
 - **Files here**: `config.ini` (model presets — the section names ARE the API model ids),
   `bench.py` (safety-first benchmark), `bench-results.md` / `bench-history.md` (ledgers, generated).

lw/.config/aichat/config.yaml

@@ -73,7 +73,8 @@ clients:
     max_input_tokens: 62000            # ctx 65536
   - name: gpt-oss-20b-low
     max_input_tokens: 62000            # ctx 65536
-# Remote access via duskadiy.com (reachable from anywhere; no key required)
+# Remote access via duskadiy.com (reachable from anywhere; requires an API key —
+# $DUSKADIY_API_KEY, from the gitignored conf.d/secrets.fish). The LAN endpoint above is keyless.
 # Same server, same model ids — reuse the list above via a YAML anchor.
 - type: openai-compatible
   name: duskadiy