homepage+docs: bottom-pinned privacy disclosure chips, live OWU api-keys screenshot, docs steps for 0.6 UI, drop house-DNS/Pi-hole bullet

serverAppConfigs-docs/Infrastructure/Homepage.md

@@ -212,9 +212,19 @@ positioning to a fixed-width inline glyph (aligned, wrap-safe); closed
 WIP items grey out (dim type, desaturated art, muted border via
 `:has(.badge.wip-closed)`); the Dragoon tagline is one spliced track
 (`sfx/dragoon-tagline.ogg` — loudnorm-matched, silence-trimmed, 350 ms
-beat; the two SC2 source oggs are trashed); privacy notes render as
-full inline text — the hover-tooltip pattern was unreachable on touch
-devices.
+beat; the two SC2 source oggs are trashed); privacy notes became
+**`<details>` disclosure chips** ("⚠ privacy note ▸") pinned to the
+bottom of each box (`margin-top:auto` in a flex-column panel/card) —
+collapsed by default, tap-to-expand, the touch-safe replacement for the
+unreachable hover tooltips. The panel click-to-open handler ignores
+`.svc-warn` taps so the chip never navigates. Same chips on the docs
+page (privacy + uncensored-model warnings). The API-access section was
+reblessed against the live Open WebUI 0.6 UI: steps now match the real
+Show/copy/rotate flow and `img/openwebui-api-keys.png` is a fresh
+screenshot (old shot trashed). The troubleshooting DNS bullet dropped
+its Pi-hole specifics — family members off the LAN cannot use
+house-DNS advice; the bullet now just says the names resolve on the
+home network.
 
 ## Design decision — 2026-08-22
 

shared/homepage/docs.html

@@ -39,10 +39,10 @@
     re-probes every few minutes. If it stays down, that service really is unhappy — tell Frank.</li>
     <li><strong>"status unavailable" on the homepage.</strong> The page couldn't read
     its status file. Hard-reload (Ctrl/Cmd-Shift-R).</li>
-    <li><strong>Connection timeout on a home device.</strong> Nine times out of ten
-    the device isn't using the house DNS (Pi-hole at 192.168.0.143) and resolved
-    our names to the public address, which doesn't answer. Point the device's DNS at
-    192.168.0.143 and retry.</li>
+    <li><strong>Connection timeout on any device.</strong> Our names only resolve
+    on the home network (or the VPN). If you are on guest Wi-Fi, a phone hotspot,
+    or out of the house, the pages will not load — that is the security working.
+    Connect to the house network and retry.</li>
     <li><strong>The bot-check spins forever.</strong> Let it finish; heavy JS blocking
     (privacy extensions) can starve it. Pause the blocker, reload, resume.</li>
   </ul>
@@ -58,7 +58,7 @@
     <li><strong>Books:</strong> <a href="https://books.franksdank.cloud">Calibre-Web</a> — the e-book library, with its own login.</li>
     <li><strong>Games:</strong> <a href="https://romm.franksdank.cloud">RomM</a> — ROM library and emulator collection.</li>
     <li><strong>Raw files:</strong> <a href="https://files.franksdank.cloud">Copyparty</a> — direct downloads and shares.</li>
-    <li><strong>Search:</strong> <a href="https://search.franksdank.cloud">SearXNG</a> — metasearch, VPN-routed, no AI snoop. <span class="key-warn" title="Searches are obfuscated, not anonymous: SearXNG hides you from the upstream engines and the VPN tunnel hides the traffic from the LAN &mdash; but the upstream search API keys are tied to Frank&rsquo;s identity. Don&rsquo;t treat it as Tor.">&#9888; privacy note &mdash; hover to read</span></li>
+    <li><strong>Search:</strong> <a href="https://search.franksdank.cloud">SearXNG</a> — metasearch, VPN-routed, no AI snoop. <details class="key-warn"><summary>&#9888; privacy note</summary><div class="warn-body">Searches are obfuscated, not anonymous: SearXNG hides you from the upstream engines and the VPN tunnel hides the traffic from the LAN &mdash; but the upstream search API keys are tied to Frank&rsquo;s identity. Don&rsquo;t treat it as Tor.</div></details></li>
   </ul>
 </section>
 
@@ -98,7 +98,7 @@
     <li><strong>Best for:</strong> code editor autocomplete, agentic search, RAG, research subagents, translation, roleplay, and summarization — any small task that doesn't need much intelligence, and anything with a picture. This is the model Open&nbsp;WebUI offers to family accounts.</li>
     <li><strong>Compaction:</strong> if your agent harness supports setting a compaction model, set this one. A compaction job severely slows the bigger models for far longer than it slows this one.</li>
     <li><strong>Supervision:</strong> requires tight human supervision.</li>
-    <li><strong>Warning:</strong> <span class="key-warn" title="Uncensored model: output can include adult content, content that describes harmful, hateful, or illegal acts, content concerning &ldquo;sensitive offensive cybersecurity topics&rdquo;, and other output that may carry severe legal risk. Take this warning seriously &mdash; don&rsquo;t ruin this server for everybody.">&#9888; Uncensored model &mdash; hover to read</span></li>
+    <li><strong>Warning:</strong> <details class="key-warn"><summary>&#9888; uncensored model</summary><div class="warn-body">Uncensored model: output can include adult content, content that describes harmful, hateful, or illegal acts, content concerning &ldquo;sensitive offensive cybersecurity topics&rdquo;, and other output that may carry severe legal risk. Take this warning seriously &mdash; don&rsquo;t ruin this server for everybody.</div></details></li>
   </ul>
 
   <h2>frank-dragoon — deep reasoning <em>(api id: frank-large)</em></h2>
@@ -109,7 +109,7 @@
     <li><strong>Inputs:</strong> text, image.</li>
     <li><strong>Best for:</strong> complex agentic tasks, programming, system administration, and "claw"-style personal agents.</li>
     <li><strong>Supervision:</strong> safe for autonomous, low-supervision use.</li>
-    <li><strong>Warning:</strong> <span class="key-warn" title="Uncensored model: output can include adult content, content that describes harmful, hateful, or illegal acts, content concerning &ldquo;sensitive offensive cybersecurity topics&rdquo;, and other output that may carry severe legal risk. Take this warning seriously &mdash; don&rsquo;t ruin this server for everybody.">&#9888; Uncensored model &mdash; hover to read</span></li>
+    <li><strong>Warning:</strong> <details class="key-warn"><summary>&#9888; uncensored model</summary><div class="warn-body">Uncensored model: output can include adult content, content that describes harmful, hateful, or illegal acts, content concerning &ldquo;sensitive offensive cybersecurity topics&rdquo;, and other output that may carry severe legal risk. Take this warning seriously &mdash; don&rsquo;t ruin this server for everybody.</div></details></li>
 
   <h2>frank-archon — the big one <em>(api id: frank-primary)</em></h2>
   <ul>
@@ -141,10 +141,12 @@
   <ol>
     <li>Open <a href="https://ai.franksdank.cloud">ai.franksdank.cloud</a> and log in.</li>
     <li>Click your circle (bottom-left corner) → <strong>Settings</strong> → <strong>Account</strong>.</li>
-    <li>Scroll to <strong>API keys</strong> → press <strong>Show</strong> → <strong>Create new secret key</strong>.</li>
-    <li>Press the copy icon. The key looks like <code>sk-3f2a…</code>.</li>
+    <li>Scroll to <strong>API keys</strong> → press <strong>Show</strong> (it flips to
+    <strong>Hide</strong>) — the key appears as a row of dots.</li>
+    <li>Press the <strong>copy icon</strong> beside the key (the eye previews it;
+    the <strong>⋯</strong> menu rotates it later). The key looks like <code>sk-3f2a…</code>.</li>
   </ol>
-  <img src="img/openwebui-api-keys.png" alt="The Open WebUI Account settings page with the API key field at the bottom">
+  <img src="img/openwebui-api-keys.png" alt="The Open WebUI Account settings page, scrolled to the API keys section with the masked key, preview, copy and rotate controls">
   <p class="key-warn">The key is a password. Anyone who has it can use our AI as
   you. Paste it only into the program's config file — never into a shared chat,
   a screenshot, or a git repository.</p>