Fix Done! spacing site-wide, and EN-only content errors (Docker/Linux mixup, missing spaces, ProloNAS pun explanation)

content/en/3.serveex/3.security/2.cloudflare.md

@@ -220,7 +220,7 @@ Then confirm your tunnel appears under _Networks > Tunnels_ in [Cloudflare Zero
 ![dns](/img/serveex/cf-dns.png)
 ::
 
-### Done !
+### Done!
 ::
 
 ## Managing Multiple Tunnels for Multiple Servers
@@ -246,7 +246,7 @@ In the [Cloudflare DNS dashboard](https://dash.cloudflare.com/), click your doma
 | `CNAME` | `subdomain1` | `yourtunnelid1.cfargotunnel.com`       |
 | `CNAME` | `subdomain2` | `yourtunnelid2.cfargotunnel.com`       |
 
-### Done !
+### Done!
 ::
 
 If you have many subdomains, point them to the above reference subdomains.

content/en/3.serveex/3.security/3.tinyauth.md

@@ -96,7 +96,7 @@ TINYAUTH_AUTH_USERS=
 
 Deploy the stack. The local interface is available at `http://yourserverip:3002`.
 
-### Done !
+### Done!
 ::
 
 ## Enabling Two-Factor Authentication
@@ -130,7 +130,7 @@ sudo docker run -i -t --rm ghcr.io/tinyauthapp/tinyauth:v5 user verify --interac
 It re-prompts for the username, password, and current 6-digit code.
 ::
 
-### Done !
+### Done!
 ::
 
 From now on, that user needs both their password and a valid code from their authenticator app to log in.
@@ -221,7 +221,7 @@ Wait a few minutes, then open `https://tinyauth.mydomain.com` in your browser an
 __If it fails:__ check your firewall rules.
 ::
 
-### Done !
+### Done!
 ::
 
 ## Protecting an app via reverse proxy
@@ -284,7 +284,7 @@ The `location /tinyauth` block runs inside SWAG's own container, so SWAG needs t
 
 Press :kbd{value="Ctrl+O"}, then :kbd{value="Enter"} to save, and :kbd{value="Ctrl+X"} to exit.
 
-### Done !
+### Done!
 ::
 
 That's it! Visiting `https://dockge.mydomain.com` now redirects to TinyAuth first. Repeat this `location /tinyauth` / `auth_request` pattern in any other app's `*.subdomain.conf` to protect it the same way.

content/en/3.serveex/3.security/4.pocket-id.md

@@ -100,7 +100,7 @@ TRUST_PROXY=true
 
 Deploy the stack. The local interface is available at `http://yourserverip:1411`.
 
-### Done !
+### Done!
 ::
 
 ## First login
@@ -205,7 +205,7 @@ Wait a few minutes, then open `https://id.mydomain.com` in your browser.
 __If it fails:__ check your firewall rules.
 ::
 
-### Done !
+### Done!
 ::
 
 ## Registering an OIDC client
@@ -224,7 +224,7 @@ Go to _Administration > OIDC Clients_, then click _Add OIDC Client_. Fill in a n
 
 Save, then copy the generated __Client ID__ and __Client Secret__. You'll need them in the other app's configuration.
 
-### Done !
+### Done!
 ::
 
 ## Connecting Pocket ID to TinyAuth
@@ -276,7 +276,7 @@ Redeploy the TinyAuth stack. On your next visit to `https://tinyauth.mydomain.co
 ✨ To skip straight to Pocket ID and hide the local login form, add `TINYAUTH_OAUTH_AUTOREDIRECT=pocketid` to the same `.env` file.
 ::
 
-### Done !
+### Done!
 ::
 
 That's it! TinyAuth now offers passwordless login via Pocket ID for every app it protects.