audit(gremlin): JellyStat FAIL 2026-04-13

Netgrimoire/Audits/JellyStat-2026-04-13.md

@@ -0,0 +1,59 @@
+---
+title: Audit - JellyStat.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:03:01.682Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:03:01.682Z
+---
+
+# Audit Report — JellyStat.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/JellyStat.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### Audit Results:
+
+1. **Homepage labels**: 
+   - `homepage.group=Library`
+   - `homepage.name=JellyStat`
+   - `homepage.icon=jellystat.png`
+   - `homepage.href=http://jellystat.netgrimoire.com`
+   - `homepage.description=Jelly Stats`
+
+   **PASS** All homepage labels are correctly specified.
+
+2. **Uptime Kuma labels**:
+   - No Uptime Kuma services defined in the YAML.
+
+   **PASS** There are no Uptime Kuma services to audit.
+
+3. **Caddy labels on exposed services**:
+   - `caddy=jellystat.netgrimoire.com`
+   - `caddy.reverse_proxy="{{upstreams 3000}}"
+
+   **FAIL**: The reverse proxy configuration is missing the necessary upstream service name. It should include a reference to the service, e.g., `caddy.reverse_proxy="{{service_name}}:3000"`.
+
+4. **Placement constraints**:
+   - `node.hostname == bruce` for both services
+
+   **PASS** Both services are constrained to run on the node with the hostname "bruce".
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - `/DockerVol/jellystat/postgres-data`
+   - `/DockerVol/jellystat/backup-data`
+
+   **PASS** All volumes follow the specified convention.
+
+6. **Network references external netgrimoire overlay**:
+
+   **PASS** The network `netgrimoire` is referenced correctly and is external.
+
+### VERDICT: FAIL
+
+The Caddy configuration needs to include a valid upstream service name for the reverse proxy.