audit(gremlin): freshrss FAIL 2026-04-03

Netgrimoire/Audits/freshrss-2026-04-03.md

@@ -0,0 +1,46 @@
+---
+title: Audit - freshrss.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:52:41.486Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:52:41.486Z
+---
+
+# Audit Report — freshrss.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/freshrss.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+```plaintext
+1. Homepage labels:
+   - homepage.group: "Services" (PASS)
+   - homepage.name: "FreshRSS" (PASS)
+   - homepage.icon: "rss" (PASS)
+   - homepage.href: "https://rss.netgrimoire.com" (PASS)
+   - homepage.description is missing (FAIL)
+
+2. Uptime Kuma labels:
+   - kuma.freshrss.http.name: "FreshRSS" (PASS)
+   - kuma.freshrss.http.url: "https://rss.netgrimoire.com" (PASS)
+
+3. Caddy labels on exposed services:
+   - caddy=<domain>: Missing specific domain (FAIL)
+   - caddy.reverse_proxy: "{{upstreams 80}}" (PASS)
+
+4. Placement constraints:
+   - node.hostname is missing (FAIL)
+
+5. Volumes use /DockerVol/<service> path convention:
+   - /data/nfs/Baxter/Docker/freshrss:/config does not follow the convention (FAIL)
+
+6. Network references external netgrimoire overlay:
+   - netgrimoire network referenced correctly (PASS)
+
+VERDICT: FAIL
+```