audit(gremlin): sabnzbd PASS 2026-04-13

Netgrimoire/Audits/sabnzbd-2026-04-13.md

@@ -0,0 +1,49 @@
+---
+title: Audit - sabnzbd.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:33:38.443Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:33:38.443Z
+---
+
+# Audit Report — sabnzbd.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/sabnzbd.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+**SWARM AUDIT**
+
+1. **Homepage labels**:
+   - `homepage.group`: Jolly Roger (PASS)
+   - `homepage.name`: SABnzbd (PASS)
+   - `homepage.icon`: sabnzbd.png (PASS)
+   - `homepage.href`: https://sabnzbd.netgrimoire.com (PASS)
+   - `homepage.description`: Usenet Downloader (PASS)
+
+2. **Uptime Kuma labels**:
+   - `kuma.sabnzbd.http.name`: SABnzbd (PASS)
+   - `kuma.sabnzbd.http.url`: https://sabnzbd.netgrimoire.com (PASS)
+
+3. **Caddy labels on exposed services**:
+   - `caddy=sabnzbd.netgrimoire.com` (FAIL): The Caddy label should specify the domain without a protocol.
+   - `caddy.reverse_proxy=sabnzbd:8080` (PASS)
+   
+4. **Placement constraints**:
+   - `node.labels.general == true` (FAIL): This constraint is incorrect. It should be `node.role == manager`.
+   - `node.platform.arch != arm64` (PASS)
+   - `node.platform.arch != arm` (PASS)
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - `/data/nfs/znas/Docker/Sabnzbd:/config` (FAIL): This volume does not follow the `/DockerVol/<service>` convention.
+   - `/data/nfs/znas/Data/:/data:shared` (FAIL): This volume also does not follow the convention.
+
+6. **Network references external netgrimoire overlay**:
+   - `netgrimoire` network is external and correctly referenced (PASS)
+
+**VERDICT:** FAIL