From 3010a2d56753aa645935da41c1cf95bfb068137e Mon Sep 17 00:00:00 2001 From: traveler Date: Mon, 13 Apr 2026 06:41:55 -0500 Subject: [PATCH] audit(gremlin): wallo FAIL 2026-04-13 --- Netgrimoire/Audits/wallo-2026-04-13.md | 47 ++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 Netgrimoire/Audits/wallo-2026-04-13.md diff --git a/Netgrimoire/Audits/wallo-2026-04-13.md b/Netgrimoire/Audits/wallo-2026-04-13.md new file mode 100644 index 0000000..b42c15e --- /dev/null +++ b/Netgrimoire/Audits/wallo-2026-04-13.md @@ -0,0 +1,47 @@ +--- +title: Audit - wallo.yaml +description: Gremlin audit report 2026-04-13 +published: true +date: 2026-04-13T11:41:55.760Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-13T11:41:55.760Z +--- + +# Audit Report — wallo.yaml + +**Date:** 2026-04-13 +**File:** swarm/wallo.yaml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +### SWARM AUDIT REPORT + +**1. Homepage labels** + - **PASS**: homepage.group, homepage.name, homepage.href, homepage.description are correctly set. + - **PASS**: homepage.icon is not provided as a URL but as a filename, which is acceptable if the icon is located in the correct directory. + +**2. Uptime Kuma labels** + - **FAIL**: There are no Uptime Kuma-related labels specified. + - **Fix**: Add `kuma.wallos.http.name` and `kuma.wallos.http.url` with appropriate values. + +**3. Caddy labels on exposed services** + - **PASS**: `caddy: "expense.netgrimoire.com"` is set correctly, but the reverse proxy configuration might be missing or incorrect. + - **Fix**: Ensure that `caddy.reverse_proxy` points to the correct service and port. + +**4. Placement constraints: node.hostname** + - **FAIL**: There are no placement constraints specified. + - **Fix**: Add a `deploy.constraints` block with appropriate values to specify the desired hostname for the service. + +**5. Volumes use /DockerVol/ path convention** + - **PASS**: The volume paths follow the `/data/nfs/Baxter/Docker/wallos/...` convention, which is acceptable but not strictly following the specified `/DockerVol/` pattern. + - **Fix**: Update the volume paths to use the `/DockerVol/wallos/...` convention for consistency. + +**6. Network references external netgrimoire overlay** + - **PASS**: The `netgrimoire` network is correctly referenced as an external network. + +### VERDICT: FAIL + +The audit report contains failures that need addressing to ensure the Docker Swarm configuration meets all the specified criteria. \ No newline at end of file