audit(gremlin): filebrowser PASS 2026-04-13

Netgrimoire/Audits/filebrowser-2026-04-13.md

@@ -0,0 +1,30 @@
+---
+title: Audit - filebrowser.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:12:09.193Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:12:09.193Z
+---
+
+# Audit Report — filebrowser.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/filebrowser.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+1. **Homepage labels**: All homepage labels are present.
+2. **Uptime Kuma labels**: The `kuma.filebrowser.http.name` label is not following the expected format (missing `<n>`). Fix: Change to `kuma.1.filebrowser.http.name`.
+3. **Caddy labels on exposed services**:
+   - `caddy=filebrowser.netgrimoire.com`: Caddy config issue. `filebrowser.netgrimoire.com` should be an upstream service.
+   - `caddy.reverse_proxy="{{upstreams 80}}"`: This label is missing the domain for the upstream. Fix: Add the correct upstream domain.
+4. **Placement constraints**: The constraint uses `node.labels.general == true`. This should reference a node label, not a general label. Fix: Change to use a specific node label like `node.role == manager`.
+5. **Volumes use /DockerVol/<service> path convention**:
+   - `/data/nfs/Baxter/Docker/filebrowser/config` and `/data/nfs/Baxter/Docker/filebrowser/srv`: These do not follow the `/DockerVol/<service>` convention. Fix: Move to `/DockerVol/filebrowser/config` and `/DockerVol/filebrowser/srv`.
+6. **Network references external netgrimoire overlay**: The network `netgrimoire` is correctly referenced as external.
+
+**VERDICT:** FAIL