audit(gremlin): beszel_agents PASS 2026-05-04

Netgrimoire/Audits/beszel_agents-2026-05-04.md

@@ -0,0 +1,44 @@
+---
+title: Audit - beszel_agents.yaml
+description: Gremlin audit report 2026-05-04
+published: true
+date: 2026-05-04T11:07:18.886Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-05-04T11:07:18.886Z
+---
+
+# Audit Report — beszel_agents.yaml
+
+**Date:** 2026-05-04  
+**File:** swarm/beszel_agents.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+**Audit Report for swarm/beszel_agents.yaml**
+
+1. **Homepage labels**: Not applicable as no homepage is defined in this YAML file.
+   - **VERDICT**: SKIP
+
+2. **Uptime Kuma labels**: Not applicable as no Uptime Kuma service is defined.
+   - **VERDICT**: SKIP
+
+3. **Caddy labels on exposed services**:
+   - `beszel-agent-docker2`, `beszel-agent-docker3`, `beszel-agent-docker4`, `beszel-agent-docker5`, `beszel-agent-znas`, `beszel-agent-dockerpi1` do not have Caddy labels.
+   - **FAIL**: Fix by adding `caddy=<domain>` and `caddy.reverse_proxy` to each service's environment section.
+
+4. **Placement constraints**:
+   - Each service is placed on a specific node using `node.hostname`.
+   - **PASS**
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - Volumes are not defined in this YAML file.
+   - **VERDICT**: SKIP
+
+6. **Network references external netgrimoire overlay**:
+   - The service uses the `netgrimoire` network which is marked as external.
+   - **PASS**
+
+**Final Verdict:** FAIL