audit(gremlin): beszel FAIL 2026-04-27

Netgrimoire/Audits/beszel-2026-04-27.md

@@ -0,0 +1,50 @@
+---
+title: Audit - beszel.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:06:00.658Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:06:00.658Z
+---
+
+# Audit Report — beszel.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/beszel.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### SWARM AUDIT
+
+1. **Homepage labels**:
+   - `homepage.group`: `Monitoring`
+   - `homepage.name`: `Beszel`
+   - `homepage.icon`: `beszel.png` (PASS)
+   - `homepage.href`: `https://beszel.netgrimoire.com` (PASS)
+   - `homepage.description`: `Beszel Service` (PASS)
+
+2. **Uptime Kuma labels**:
+   - No Uptime Kuma labels found in the deploy section. (FAIL)  
+     *Fix*: Add appropriate Kuma labels for any relevant services.
+
+3. **Caddy labels on exposed services**:
+   - `caddy`: `beszel.netgrimoire.com` (PASS)
+   - `caddy.reverse_proxy`: `"{{upstreams 8090}}"` (PASS)
+
+4. **Placement constraints**:
+   - Constraint: `node.labels.general == true`
+     *Note*: Assuming `general` is a label set on appropriate nodes.
+     (PASS, assuming correctness of node labels)
+
+5. **Volumes use `/DockerVol/<service>` path convention**:
+   - Volume path: `/data/nfs/znas/Docker/beszel:/beszel_data`
+     *Fix*: Change to `/DockerVol/beszel`  
+     *Note*: Correct the volume path to follow the convention.
+
+6. **Network references external netgrimoire overlay**:
+   - `netgrimoire`: External network reference (PASS)
+
+### VERDICT: FAIL