audit(gremlin): nzbget FAIL 2026-04-27

Netgrimoire/Audits/nzbget-2026-04-27.md

@@ -0,0 +1,52 @@
+---
+title: Audit - nzbget.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:28:14.628Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:28:14.628Z
+---
+
+# Audit Report — nzbget.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/nzbget.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### Audit Results:
+
+1. **Homepage Labels**:
+   - `homepage.group`: `Nucking Apps` - **PASS**
+   - `homepage.name`: `Nzbget` - **PASS**
+   - `homepage.icon`: `nzbget.png` - **PASS**
+   - `homepage.href`: `http://nzbget.netgrimoire.com` - **PASS**
+   - `homepage.description`: `Usenet Downloader` - **PASS**
+
+2. **Uptime Kuma Labels**:
+   - `kuma.nzbget.http.name`: `"nzbget"` - **PASS**
+   - `kuma.nzbget.http.url`: `http://nzbget:6789` - **PASS**
+
+3. **Caddy Labels on Exposed Services**:
+   - `caddy=nzbget.netgrimoire.com` - **PASS**
+   - `caddy.reverse_proxy="{{upstreams 6789}}"` - **FAIL**: The variable `{{upstreams}}` should be replaced with the actual upstream service name or IP address. Update this label to specify a valid upstream.
+
+4. **Placement Constraints**:
+   - `node.hostname==docker5` - **PASS**
+
+5. **Volumes Use `/DockerVol/<service>` Path Convention**:
+   - `/DockerVol/nzbget/config:/config` - **PASS**
+   - `/data/nfs/znas/Green/:/data:shared` - **FAIL**: This volume does not follow the `/DockerVol/<service>` path convention. It should be moved to a directory under `/DockerVol`.
+
+6. **Network References External `netgrimoire` Overlay**:
+   - `networks: netgrimoire:` - **PASS**
+
+### Fix Recommendations:
+
+1. Update the Caddy label to specify a valid upstream service.
+2. Move the shared volume to follow the `/DockerVol/<service>` path convention.
+
+### VERDICT: FAIL