Add sparkle emoji and hide the icon consistently on tip admonitions

content/en/3.serveex/3.security/1.wireguard.md

@@ -122,7 +122,7 @@ networks:
         - subnet: fdcc:ad94:bacf:61a3::/64
 ```
 
-::tip
+::tip{icon=""}
 ✨ **Tip:**
 
 - You can customize WireGuard and web UI ports.
@@ -188,7 +188,7 @@ Create the folder:
 sudo mkdir -p /docker/wireguard/config/wg_confs
 ```
 
-::tip
+::tip{icon=""}
 ✨ **Tip:** You can use [File Browser](/serveex/files/file-browser) instead of the terminal to edit and upload files.
 ::
 

content/en/3.serveex/3.security/2.authentik.md

@@ -210,7 +210,7 @@ We assume you have already created a subdomain like `auth.mydomain.com` in your
 
 Open the `authentik-server.conf` file:
 
-::tip
+::tip{icon=""}
 ✨ __Tip for those who dislike terminals:__
 You can use [File Browser](/serveex/files/file-browser) to navigate and edit files instead of using terminal commands.
 ::
@@ -353,7 +353,7 @@ Press :kbd{value="Ctrl+O"}, then :kbd{value="Enter"} to save, and :kbd{value="Ct
 
 Done! Now when accessing `https://dockge.mydomain.com`, you’ll be redirected to the Authentik login screen.
 
-::tip
+::tip{icon=""}
 ✨ __Tip:__ In Dockge's settings, you can disable Dockge's authentication to avoid double login. **Warning**: this means if the port is open on your local network, there will be no authentication at all.
 ::
 
@@ -427,7 +427,7 @@ If you haven’t installed [Dockge](/serveex/core/docker/#installer-dockge-pour-
 sudo mkdir -P /docker/authentik-outpost
 ```
 
-::tip
+::tip{icon=""}
 ✨ __Tip for terminal-averse users:__
 You can use [File Browser](/serveex/files/file-browser) to navigate and edit your files instead of using terminal commands.
 ::

content/en/3.serveex/3.security/3.cloudflare.md

@@ -89,7 +89,7 @@ These two mods, merged into the SWAG container, require some configuration.
 
 Create a file `tunnelconfig.yml` to reference in your SWAG `compose.yaml`.
 
-::tip
+::tip{icon=""}
 ✨ __Tip:__ Use [File Browser](/serveex/files/file-browser) to navigate and edit files instead of using the terminal.
 ::
 
@@ -180,7 +180,7 @@ services:
     restart: unless-stopped
 ```
 
-::tip
+::tip{icon=""}
 ✨ __Tip:__ Add a Watchtower label to automate updates:
 
 ```yaml
@@ -222,7 +222,7 @@ Once done, deploy the stack. Check the logs—you should reach `server ready`.
 
 Then confirm your tunnel appears under _Networks > Tunnels_ in [Cloudflare Zero Trust](https://one.dash.cloudflare.com/). By default, all subdomains will be routed through the tunnel—no need to define them [in your DNS zone](/general/networking/dns).
 
-::tip
+::tip{icon=""}
 ✨ __Tip:__ If you want to expose a service without a tunnel, just define an A record [in your DNS zone](/general/networking/dns). If resolution fails, disable the proxy function for that record—e.g., for `sub.mondomaine.fr`.
 ![dns](/img/serveex/cf-dns.png)
 ::