diff --git a/Netgrimoire/Audits/beszel-2026-04-03.md b/Netgrimoire/Audits/beszel-2026-04-03.md deleted file mode 100644 index 479a6ca..0000000 --- a/Netgrimoire/Audits/beszel-2026-04-03.md +++ /dev/null @@ -1,49 +0,0 @@ ---- -title: Audit - beszel.yaml -description: Gremlin audit report 2026-04-03 -published: true -date: 2026-04-03T01:49:45.885Z -tags: gremlin,audit -editor: markdown -dateCreated: 2026-04-03T01:49:45.885Z ---- - -# Audit Report — beszel.yaml - -**Date:** 2026-04-03 -**File:** swarm/beszel.yaml -**Type:** Docker Swarm -**Verdict:** FAIL - ---- - -**SWARM AUDIT RESULTS** - -1. **Homepage labels**: - - `homepage.group`: Monitoring (PASS) - - `homepage.name`: Beszel (PASS) - - `homepage.icon`: beszel.png (PASS) - - `homepage.href`: https://beszel.netgrimoire.com (PASS) - - `homepage.description`: Beszel Service (PASS) - -2. **Uptime Kuma labels**: - - Not applicable as there are no Uptime Kuma services deployed in this configuration (PASS) - -3. **Caddy labels on exposed services**: - - `caddy=beszel.netgrimoire.com` (PASS) - - `caddy.reverse_proxy="{{upstreams 8090}}"` (PASS) - -4. **Placement constraints**: - - The constraint `node.labels.general == true` should be `node.role == 'manager'` for better security and control (FAIL). Update the placement block accordingly. - -5. **Volumes use /DockerVol/ path convention**: - - `/data/nfs/znas/Docker/beszel:/beszel_data` does not follow the `/DockerVol/` path convention (FAIL). Rename the volume to `/DockerVol/beszel`. - -6. **Network references external netgrimoire overlay**: - - The `netgrimoire` network is correctly referenced as an external network (PASS) - -**VERDICT: FAIL** - -Fixes required: -1. Update placement constraint to `node.role == 'manager'`. -2. Rename the volume to `/DockerVol/beszel`. \ No newline at end of file