prep for new grimoire
This commit is contained in:
parent
a72eb28f9e
commit
2aff30ab71
165 changed files with 0 additions and 0 deletions
45
False Grimoire/Netgrimoire/Audits/web-2026-04-03.md
Normal file
45
False Grimoire/Netgrimoire/Audits/web-2026-04-03.md
Normal file
|
|
@ -0,0 +1,45 @@
|
|||
---
|
||||
title: Audit - web.yaml
|
||||
description: Gremlin audit report 2026-04-03
|
||||
published: true
|
||||
date: 2026-04-03T03:25:48.458Z
|
||||
tags: gremlin,audit
|
||||
editor: markdown
|
||||
dateCreated: 2026-04-03T03:25:48.458Z
|
||||
---
|
||||
|
||||
# Audit Report — web.yaml
|
||||
|
||||
**Date:** 2026-04-03
|
||||
**File:** swarm/web.yaml
|
||||
**Type:** Docker Swarm
|
||||
**Verdict:** FAIL
|
||||
|
||||
---
|
||||
|
||||
1. **Homepage labels**:
|
||||
- `homepage.name` is present.
|
||||
- `homepage.icon` is present.
|
||||
- `homepage.href` is missing. Add it with the appropriate value.
|
||||
- `homepage.description` is missing. Consider adding a description for clarity.
|
||||
|
||||
2. **Uptime Kuma labels**:
|
||||
- `kuma.web.http.name` is present.
|
||||
- `kuma.web.http.url` is present.
|
||||
|
||||
3. **Caddy labels on exposed services**:
|
||||
- `caddy=www.netgrimoire.com` is present.
|
||||
- `caddy.reverse_proxy="web:80"` is present.
|
||||
|
||||
4. **Placement constraints**:
|
||||
- `node.labels.cpu == amd` is present, but it should be `node.labels.cpu == "amd"` for better readability.
|
||||
|
||||
5. **Volumes use `/DockerVol/<service>` path convention**:
|
||||
- The volumes are not using the `/DockerVol/<service>` path convention. They are located at `/data/nfs/znas/Docker/web/pages` and `/data/nfs/znas/Docker/web/apache`. Consider creating a symbolic link or moving these volumes to follow the convention.
|
||||
|
||||
6. **Network references external `netgrimoire` overlay**:
|
||||
- The network is correctly referencing an external `netgrimoire` overlay.
|
||||
|
||||
**VERDICT: FAIL**
|
||||
|
||||
The homepage labels are missing `homepage.href` and `homepage.description`. Additionally, the volumes need to be moved or symlinked to follow the `/DockerVol/<service>` path convention.
|
||||
Loading…
Add table
Add a link
Reference in a new issue