diff --git a/Netgrimoire/Audits/firefox-2026-04-20.md b/Netgrimoire/Audits/firefox-2026-04-20.md
new file mode 100644
index 0000000..e97ff7d
--- /dev/null
+++ b/Netgrimoire/Audits/firefox-2026-04-20.md
@@ -0,0 +1,42 @@
+---
+title: Audit - firefox.yaml
+description: Gremlin audit report 2026-04-20
+published: true
+date: 2026-04-20T11:13:07.251Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-20T11:13:07.251Z
+---
+
+# Audit Report — firefox.yaml
+
+**Date:** 2026-04-20  
+**File:** swarm/firefox.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+1. Homepage labels: **PASS**
+   - homepage.group: "Remote Access"
+   - homepage.name: "Firefox"
+   - homepage.icon: "firefox.png"
+   - homepage.href: "https://firefox.netgrimoire.com"
+   - homepage.description: "Remote Browser"
+
+2. Uptime Kuma labels: **FAIL**  
+   - No Uptime Kuma labels are present in the `deploy` block.
+
+3. Caddy labels on exposed services: **PASS**
+   - caddy=firefox.netgrimoire.com
+   - caddy.reverse_proxy=http://firefox:5800
+
+4. Placement constraints: **FAIL**  
+   - No placement constraints are specified.
+
+5. Volumes use /DockerVol/<service> path convention: **FAIL**  
+   - The volume is set to `/data/nfs/znas/Docker/firefox`, which does not follow the recommended `/DockerVol/<service>` convention.
+
+6. Network references external netgrimoire overlay: **PASS**
+
+**VERDICT: FAIL**
\ No newline at end of file