audit(gremlin): tunarr FAIL 2026-04-03

Netgrimoire/Audits/tunarr-2026-04-03.md

@@ -0,0 +1,30 @@
+---
+title: Audit - tunarr.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T03:20:23.850Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T03:20:23.850Z
+---
+
+# Audit Report — tunarr.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/tunarr.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**SWARM AUDIT — check ALL of the following:**
+
+1. **Homepage labels**: All homepage labels are present.
+2. **Uptime Kuma labels**: The labels `kuma.tunarr.http.name` and `kuma.tunarr.http.url` are present, but there is no label for another service (`<n>`) specified in the Uptime Kuma documentation. Assuming this is a single service, it is acceptable.
+3. **Caddy labels on exposed services**: The Caddy labels `caddy=tunarr.netgrimoire.com` and `caddy.reverse_proxy="{{upstreams 8000}}"` are present.
+4. **Placement constraints**: The placement constraint `node.labels.general == true` is not valid. It should be `node.role == "manager"` or another appropriate role if using a manager node.
+5. **Volumes use /DockerVol/<service> path convention**: The volumes follow the convention, e.g., `/data/nfs/Baxter/Docker/tunarr/config`.
+6. **Network references external netgrimoire overlay**: The network `netgrimoire` is referenced correctly and is an external network.
+
+**Final line:**
+VERDICT: FAIL