diff --git a/Netgrimoire/Audits/phpipam-2026-04-27.md b/Netgrimoire/Audits/phpipam-2026-04-27.md
new file mode 100644
index 0000000..eec6ce0
--- /dev/null
+++ b/Netgrimoire/Audits/phpipam-2026-04-27.md
@@ -0,0 +1,49 @@
+---
+title: Audit - phpipam.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:30:14.725Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:30:14.725Z
+---
+
+# Audit Report — phpipam.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/phpipam.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+### Swarm Audit Report:
+
+1. **Homepage Labels**:
+   - `homepage.group=Management` is present.
+   - `homepage.name=phpIPAM` is present.
+   - `homepage.icon=ipam.png` is present.
+   - `homepage.href=http://ipam.netgrimoire.com` is present.
+   - `homepage.description=IP Address Management` is present.
+
+2. **Uptime Kuma Labels**:
+   - No Uptime Kuma services are listed in the YAML file.
+
+3. **Caddy Labels on Exposed Services**:
+   - `caddy=ipam.netgrimoire.com` is present.
+   - `caddy.reverse_proxy="{{upstreams 80}}"` is present.
+
+4. **Placement Constraints**:
+   - All services have a placement constraint: `node.hostname == docker3`.
+
+5. **Volumes Use /DockerVol/<service> Path Convention**:
+   - `/DockerVol/phpipam/phpipam-logo:/phpipam/css/images/logo` for `phpipam-web`.
+   - `/DockerVol/phpipam/mariadb:/var/lib/mysql` for `phpipam-mariadb`.
+   - The volume path convention is followed correctly.
+
+6. **Network References External netgrimoire Overlay**:
+   - `networks: - netgrimoire` and `netgrimoire: external: true` are present, indicating an external network reference.
+
+### Final Line:
+
+VERDICT: PASS
\ No newline at end of file