audit(gremlin): forgejo PASS 2026-05-04

Netgrimoire/Audits/forgejo-2026-05-04.md

@@ -0,0 +1,40 @@
+---
+title: Audit - forgejo.yaml
+description: Gremlin audit report 2026-05-04
+published: true
+date: 2026-05-04T11:13:32.359Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-05-04T11:13:32.359Z
+---
+
+# Audit Report — forgejo.yaml
+
+**Date:** 2026-05-04  
+**File:** swarm/forgejo.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+**SWARM AUDIT REPORT**
+
+1. **Homepage labels:** 
+   - **PASS**: `homepage.group`, `homepage.name`, `homepage.icon`, `homepage.href`, and `homepage.description` are all correctly set.
+
+2. **Uptime Kuma labels:**
+   - **FAIL**: The Uptime Kuma labels (`kuma.<n>.http.name` and `kuma.<n>.http.url`) are missing from the provided YAML file. These should be added if Uptime Kuma is a component of this swarm.
+
+3. **Caddy labels on exposed services:**
+   - **PASS**: The Caddy configuration includes the correct service (`forgejo:3000`) and domain (`git.netgrimoire.com`).
+
+4. **Placement constraints:**
+   - **FAIL**: The `node.hostname == znas` constraint is specific to your setup and should be reviewed if it's mandatory for all environments.
+
+5. **Volumes use /DockerVol/<service> path convention:**
+   - **PASS**: All volumes follow the `/DockerVol/forgejo:/data` pattern.
+
+6. **Network references external netgrimoire overlay:**
+   - **PASS**: The `netgrimoire` network is correctly referenced as an external network.
+
+**VERDICT:** FAIL