Delete Netgrimoire/Audits/beszel-2026-04-03.md
This commit is contained in:
parent
4b16c13d00
commit
2b175b1d08
1 changed files with 0 additions and 49 deletions
|
|
@ -1,49 +0,0 @@
|
||||||
---
|
|
||||||
title: Audit - beszel.yaml
|
|
||||||
description: Gremlin audit report 2026-04-03
|
|
||||||
published: true
|
|
||||||
date: 2026-04-03T01:49:45.885Z
|
|
||||||
tags: gremlin,audit
|
|
||||||
editor: markdown
|
|
||||||
dateCreated: 2026-04-03T01:49:45.885Z
|
|
||||||
---
|
|
||||||
|
|
||||||
# Audit Report — beszel.yaml
|
|
||||||
|
|
||||||
**Date:** 2026-04-03
|
|
||||||
**File:** swarm/beszel.yaml
|
|
||||||
**Type:** Docker Swarm
|
|
||||||
**Verdict:** FAIL
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
**SWARM AUDIT RESULTS**
|
|
||||||
|
|
||||||
1. **Homepage labels**:
|
|
||||||
- `homepage.group`: Monitoring (PASS)
|
|
||||||
- `homepage.name`: Beszel (PASS)
|
|
||||||
- `homepage.icon`: beszel.png (PASS)
|
|
||||||
- `homepage.href`: https://beszel.netgrimoire.com (PASS)
|
|
||||||
- `homepage.description`: Beszel Service (PASS)
|
|
||||||
|
|
||||||
2. **Uptime Kuma labels**:
|
|
||||||
- Not applicable as there are no Uptime Kuma services deployed in this configuration (PASS)
|
|
||||||
|
|
||||||
3. **Caddy labels on exposed services**:
|
|
||||||
- `caddy=beszel.netgrimoire.com` (PASS)
|
|
||||||
- `caddy.reverse_proxy="{{upstreams 8090}}"` (PASS)
|
|
||||||
|
|
||||||
4. **Placement constraints**:
|
|
||||||
- The constraint `node.labels.general == true` should be `node.role == 'manager'` for better security and control (FAIL). Update the placement block accordingly.
|
|
||||||
|
|
||||||
5. **Volumes use /DockerVol/<service> path convention**:
|
|
||||||
- `/data/nfs/znas/Docker/beszel:/beszel_data` does not follow the `/DockerVol/<service>` path convention (FAIL). Rename the volume to `/DockerVol/beszel`.
|
|
||||||
|
|
||||||
6. **Network references external netgrimoire overlay**:
|
|
||||||
- The `netgrimoire` network is correctly referenced as an external network (PASS)
|
|
||||||
|
|
||||||
**VERDICT: FAIL**
|
|
||||||
|
|
||||||
Fixes required:
|
|
||||||
1. Update placement constraint to `node.role == 'manager'`.
|
|
||||||
2. Rename the volume to `/DockerVol/beszel`.
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue