From 70dd3b86e591e2ded9a65b09c8cfe79c5a821528 Mon Sep 17 00:00:00 2001 From: traveler Date: Thu, 2 Apr 2026 22:15:29 -0500 Subject: [PATCH] audit(gremlin): sabnzbd FAIL 2026-04-03 --- Netgrimoire/Audits/sabnzbd-2026-04-03.md | 48 ++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 Netgrimoire/Audits/sabnzbd-2026-04-03.md diff --git a/Netgrimoire/Audits/sabnzbd-2026-04-03.md b/Netgrimoire/Audits/sabnzbd-2026-04-03.md new file mode 100644 index 0000000..66bcf5b --- /dev/null +++ b/Netgrimoire/Audits/sabnzbd-2026-04-03.md @@ -0,0 +1,48 @@ +--- +title: Audit - sabnzbd.yaml +description: Gremlin audit report 2026-04-03 +published: true +date: 2026-04-03T03:15:29.656Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-03T03:15:29.656Z +--- + +# Audit Report — sabnzbd.yaml + +**Date:** 2026-04-03 +**File:** swarm/sabnzbd.yaml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +1. **Homepage labels**: All homepage labels are present and correctly formatted. + - `homepage.group=Jolly Roger` + - `homepage.name=Sabnzbd` + - `homepage.icon=sabnzbd.png` + - `homepage.href=http://sabnzbd.netgrimoire.com` + - `homepage.description=Usenet Downloader` + +2. **Uptime Kuma labels**: Both `kuma.sab.http.name` and `kuma.sab.http.url` are present. + - `kuma.sab.http.name="Sabnzbd"` + - `kuma.sab.http.url=http://sabnzbd:8080` + +3. **Caddy labels on exposed services**: Caddy labels include both the domain and reverse proxy settings. + - `caddy=sabnzbd.netgrimoire.com` + - `caddy.reverse_proxy="{{upstreams 8080}}"` + +4. **Placement constraints**: The placement constraint is referencing a specific node label (`node.labels.general == true`). This needs to be updated to reference the node's hostname instead for better clarity. + - Current: `- node.labels.general == true` + - Fix: Update to use `node.hostname` if appropriate, or keep the original if `general` is indeed a valid label. + +5. **Volumes use /DockerVol/ path convention**: The volumes do not follow the `/DockerVol/` path convention. + - Current paths: + - `/data/nfs/znas/Data/:/data:shared` + - `/data/nfs/znas/Docker/Sabnzbd:/config` + +6. **Network references external netgrimoire overlay**: The network reference is correctly set to the `netgrimoire` network, which is marked as external. + +**VERDICT: FAIL** + +The placement constraint should be updated for clarity and the volumes should adhere to the specified path convention. \ No newline at end of file