docs: rename frank-default-large/small/sightsound to frank-large/small/npu across vault

Mechanical identity rename across the knowledge base, AGENTS.md, README, the
hermes config example, and homepage services.json. No behavior change; served
aliases on the LLM endpoints change with the deploy of commit 69f87c8.

serverAppConfigs-docs/Dankserver/redis.md

@@ -1,40 +1,67 @@
+---
+type: reference
+title: Redis (RomM Cache / Queue)
+description: Redis 7-alpine cache and task-queue backend for RomM on Dankserver — quadlet unit, network alias topology, and backup path.
+tags: [redis, romm, dankserver]
+timestamp: 2026-09-03T00:00:00Z
+---
+
 # Redis (RomM Cache / Queue)
 
-Redis 7 provides the caching and task queue backend for RomM on Dankserver. RomM 5.2.0 requires Redis (or Valkey) for its task queue.
+Redis 7 provides the caching and task-queue backend for [[RomM]] on Dankserver.
+RomM requires Redis (or Valkey) for its task queue; this deployment runs
+stock `redis:7-alpine` — no Valkey here, unlike the SearXNG cache on
+Dankclaw ([[Valkey]]).
 
-**Host:** Dankserver — **Docs:** https://redis.io/docs/
+**Host:** Dankserver — container name `romm-redis`, unit `romm-redis.service`
+(user-manager quadlet from `dankserver/romm/quadlet/romm-redis.container`).
 
-## Facts
+## Facts (verified from the live unit)
 
 | Item | Value |
 |------|-------|
-| Image | `docker.io/redis:7-alpine` |
-| Port | 6379 (internal, within `appnet`) |
-| Data volume | `/opt/romm/redis` |
-| Auth | None (local-only, no password needed) |
+| Image | `docker.io/library/redis:7-alpine` |
+| Port | 6379 — internal only; no `PublishPort`, so it is unreachable from the host network by construction |
+| Network | `dankserver_appnet` with `alias=redis` — that alias is what makes `REDIS_HOST=redis` in the RomM unit resolve |
+| Data volume | `/home/dank/Containers/romm/redis:/data` |
+| Auth | None — safe precisely because the container is not published anywhere; only appnet members can reach it |
 
-## Docker Compose
+## Unit shape (as deployed)
 
-```yaml
-redis:
-  image: docker.io/redis:7-alpine
-  container_name: romm-redis
-  restart: unless-stopped
-  volumes:
-    - /opt/romm/redis:/data
-  healthcheck:
-    test: ["CMD", "redis-cli", "ping"]
-    interval: 10s
-    timeout: 5s
-    retries: 3
+```ini
+[Container]
+ContainerName=romm-redis
+Image=docker.io/library/redis:7-alpine
+Network=dankserver_appnet:alias=redis
+Volume=/home/dank/Containers/romm/redis:/data
+HealthCmd=redis-cli ping
+HealthInterval=10s
+HealthTimeout=5s
+HealthRetries=3
+
+[Service]
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=default.target
 ```
 
+No `EnvironmentFile` — there is nothing secret in this unit; the auth-less
+posture is enforced by network topology (alias-only reachability), not by a
+password. If a future client ever needs Redis from outside the appnet, add
+`PublishPort` **and** a `requirepass` in the same change — never just the port.
+
 ## Backup
 
 ```bash
-sudo rsync -a /opt/romm/redis /mnt/backup/romm-redis/
+sudo rsync -a /home/dank/Containers/romm/redis /mnt/backup/romm-redis/
 ```
 
+Redis here is cache + queue state; losing it costs queued jobs and cache warm,
+not the library (the database lives in [[MariaDB]]).
+
 ## See Also
 
 - [[RomM]] — service that uses this cache
+- [[Valkey]] — the SearXNG-side equivalent on Dankclaw