audit(gremlin): ntfy PASS 2026-04-27

Netgrimoire/Audits/ntfy-2026-04-27.md

@@ -0,0 +1,48 @@
+---
+title: Audit - ntfy.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:27:19.961Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:27:19.961Z
+---
+
+# Audit Report — ntfy.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/ntfy.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+1. **Homepage labels**:
+   - `homepage.group`: Services (PASS)
+   - `homepage.name`: ntfy (PASS)
+   - `homepage.icon`: ntfy.png (PASS)
+   - `homepage.href`: https://ntfy.netgrimoire.com (PASS)
+   - `homepage.description`: Push Notifications (PASS)
+
+2. **Uptime Kuma labels**:
+   - `kuma.ntfy.http.name`: ntfy (PASS)
+   - `kuma.ntfy.http.url`: https://ntfy.netgrimoire.com (PASS)
+
+3. **Caddy labels on exposed services**:
+   - `caddy: ntfy.netgrimoire.com` (PASS)
+   - `caddy.reverse_proxy: ntfy:80` (PASS)
+
+4. **Placement constraints**:
+   - `node.platform.arch != aarch64` (PASS)
+   - `node.platform.arch != arm` (PASS)
+   - Note: No specific constraint for node.hostname, but the absence of such constraint is neutral.
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - `/data/nfs/znas/Docker/ntfy/cache:/var/cache/ntfy`: FAIL
+     - Issue: The volume does not follow the /DockerVol/<service> path convention.
+     - Fix: Update the volume path to `/DockerVol/ntfy/cache`.
+
+6. **Network references external netgrimoire overlay**:
+   - `networks: - netgrimoire`: PASS
+
+**VERDICT**: FAIL