---
title: Audit - beszel.yaml
description: Gremlin audit report 2026-04-03
published: true
date: 2026-04-03T01:49:45.885Z
tags: gremlin,audit
editor: markdown
dateCreated: 2026-04-03T01:49:45.885Z
---

# Audit Report — beszel.yaml

**Date:** 2026-04-03  
**File:** swarm/beszel.yaml  
**Type:** Docker Swarm  
**Verdict:** FAIL

---

**SWARM AUDIT RESULTS**

1. **Homepage labels**:  
   - `homepage.group`: Monitoring (PASS)
   - `homepage.name`: Beszel (PASS)
   - `homepage.icon`: beszel.png (PASS)
   - `homepage.href`: https://beszel.netgrimoire.com (PASS)
   - `homepage.description`: Beszel Service (PASS)

2. **Uptime Kuma labels**:  
   - Not applicable as there are no Uptime Kuma services deployed in this configuration (PASS)

3. **Caddy labels on exposed services**:  
   - `caddy=beszel.netgrimoire.com` (PASS)
   - `caddy.reverse_proxy="{{upstreams 8090}}"` (PASS)

4. **Placement constraints**:  
   - The constraint `node.labels.general == true` should be `node.role == 'manager'` for better security and control (FAIL). Update the placement block accordingly.

5. **Volumes use /DockerVol/<service> path convention**:  
   - `/data/nfs/znas/Docker/beszel:/beszel_data` does not follow the `/DockerVol/<service>` path convention (FAIL). Rename the volume to `/DockerVol/beszel`.

6. **Network references external netgrimoire overlay**:  
   - The `netgrimoire` network is correctly referenced as an external network (PASS)

**VERDICT: FAIL**

Fixes required:
1. Update placement constraint to `node.role == 'manager'`.
2. Rename the volume to `/DockerVol/beszel`.