diff --git a/Netgrimoire/Audits/sabnzbd-2026-04-13.md b/Netgrimoire/Audits/sabnzbd-2026-04-13.md new file mode 100644 index 0000000..e50985c --- /dev/null +++ b/Netgrimoire/Audits/sabnzbd-2026-04-13.md @@ -0,0 +1,49 @@ +--- +title: Audit - sabnzbd.yaml +description: Gremlin audit report 2026-04-13 +published: true +date: 2026-04-13T11:33:38.443Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-13T11:33:38.443Z +--- + +# Audit Report — sabnzbd.yaml + +**Date:** 2026-04-13 +**File:** swarm/sabnzbd.yaml +**Type:** Docker Swarm +**Verdict:** PASS + +--- + +**SWARM AUDIT** + +1. **Homepage labels**: + - `homepage.group`: Jolly Roger (PASS) + - `homepage.name`: SABnzbd (PASS) + - `homepage.icon`: sabnzbd.png (PASS) + - `homepage.href`: https://sabnzbd.netgrimoire.com (PASS) + - `homepage.description`: Usenet Downloader (PASS) + +2. **Uptime Kuma labels**: + - `kuma.sabnzbd.http.name`: SABnzbd (PASS) + - `kuma.sabnzbd.http.url`: https://sabnzbd.netgrimoire.com (PASS) + +3. **Caddy labels on exposed services**: + - `caddy=sabnzbd.netgrimoire.com` (FAIL): The Caddy label should specify the domain without a protocol. + - `caddy.reverse_proxy=sabnzbd:8080` (PASS) + +4. **Placement constraints**: + - `node.labels.general == true` (FAIL): This constraint is incorrect. It should be `node.role == manager`. + - `node.platform.arch != arm64` (PASS) + - `node.platform.arch != arm` (PASS) + +5. **Volumes use /DockerVol/ path convention**: + - `/data/nfs/znas/Docker/Sabnzbd:/config` (FAIL): This volume does not follow the `/DockerVol/` convention. + - `/data/nfs/znas/Data/:/data:shared` (FAIL): This volume also does not follow the convention. + +6. **Network references external netgrimoire overlay**: + - `netgrimoire` network is external and correctly referenced (PASS) + +**VERDICT:** FAIL \ No newline at end of file