---
title: Audit - pinchflat.yaml
description: Gremlin audit report 2026-04-03
published: true
date: 2026-04-03T03:09:34.505Z
tags: gremlin,audit
editor: markdown
dateCreated: 2026-04-03T03:09:34.505Z
---

# Audit Report — pinchflat.yaml

**Date:** 2026-04-03  
**File:** swarm/pinchflat.yaml  
**Type:** Docker Swarm  
**Verdict:** PASS

---

### SWARM AUDIT CHECKS:

1. **Homepage labels**:
   - `homepage.group`: "Downloaders" - PASS
   - `homepage.name`: "PinchFlat" - PASS
   - `homepage.icon`: "pinchflat.png" - FAIL (icon path should be accessible)
   - `homepage.href`: "https://pinchflat.netgrimoire.com" - PASS
   - `homepage.description`: "YouTube Library" - PASS

2. **Uptime Kuma labels**:
   - `kuma.pf.http.name`: "PinchFlat" - PASS
   - `kuma.pf.http.url`: "http://pinchflat:8945" - PASS

3. **Caddy labels on exposed services**:
   - `caddy=pinchflat.netgrimoire.com` - PASS
   - `caddy.import=authentik` - PASS
   - `caddy.reverse_proxy=pinchflat:8945` - PASS

4. **Placement constraints**:
   - `node.hostname==nas` - PASS

5. **Volumes use /DockerVol/<service> path convention**:
   - `/DockerVol/pinchflat/config:/config` - PASS
   - `/data/nfs/Baxter/Data/media/other/pinchflat:/downloads` - FAIL (should follow the /DockerVol/<service> convention)

6. **Network references external netgrimoire overlay**:
   - `netgrimoire` network is external - PASS

### FIXES:

- Update `homepage.icon` to a valid accessible path.
- Change `/data/nfs/Baxter/Data/media/other/pinchflat:/downloads` to follow the convention by placing it under `/DockerVol/pinchflat/downloads`.

### VERDICT:
FAIL