audit(gremlin): sabnzbd FAIL 2026-04-03

Netgrimoire/Audits/sabnzbd-2026-04-03.md

@@ -0,0 +1,48 @@
+---
+title: Audit - sabnzbd.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T03:15:29.656Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T03:15:29.656Z
+---
+
+# Audit Report — sabnzbd.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/sabnzbd.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+1. **Homepage labels**: All homepage labels are present and correctly formatted.
+   - `homepage.group=Jolly Roger`
+   - `homepage.name=Sabnzbd`
+   - `homepage.icon=sabnzbd.png`
+   - `homepage.href=http://sabnzbd.netgrimoire.com`
+   - `homepage.description=Usenet Downloader`
+
+2. **Uptime Kuma labels**: Both `kuma.sab.http.name` and `kuma.sab.http.url` are present.
+   - `kuma.sab.http.name="Sabnzbd"`
+   - `kuma.sab.http.url=http://sabnzbd:8080`
+
+3. **Caddy labels on exposed services**: Caddy labels include both the domain and reverse proxy settings.
+   - `caddy=sabnzbd.netgrimoire.com`
+   - `caddy.reverse_proxy="{{upstreams 8080}}"`
+
+4. **Placement constraints**: The placement constraint is referencing a specific node label (`node.labels.general == true`). This needs to be updated to reference the node's hostname instead for better clarity.
+   - Current: `- node.labels.general == true`
+   - Fix: Update to use `node.hostname` if appropriate, or keep the original if `general` is indeed a valid label.
+
+5. **Volumes use /DockerVol/<service> path convention**: The volumes do not follow the `/DockerVol/<service>` path convention.
+   - Current paths:
+     - `/data/nfs/znas/Data/:/data:shared`
+     - `/data/nfs/znas/Docker/Sabnzbd:/config`
+
+6. **Network references external netgrimoire overlay**: The network reference is correctly set to the `netgrimoire` network, which is marked as external.
+
+**VERDICT: FAIL**
+
+The placement constraint should be updated for clarity and the volumes should adhere to the specified path convention.