audit(gremlin): filebrowser FAIL 2026-05-04
This commit is contained in:
parent
c418739866
commit
48c2f35e18
1 changed files with 56 additions and 0 deletions
56
Netgrimoire/Audits/filebrowser-2026-05-04.md
Normal file
56
Netgrimoire/Audits/filebrowser-2026-05-04.md
Normal file
|
|
@ -0,0 +1,56 @@
|
|||
---
|
||||
title: Audit - filebrowser.yaml
|
||||
description: Gremlin audit report 2026-05-04
|
||||
published: true
|
||||
date: 2026-05-04T11:12:00.339Z
|
||||
tags: gremlin,audit
|
||||
editor: markdown
|
||||
dateCreated: 2026-05-04T11:12:00.339Z
|
||||
---
|
||||
|
||||
# Audit Report — filebrowser.yaml
|
||||
|
||||
**Date:** 2026-05-04
|
||||
**File:** swarm/filebrowser.yaml
|
||||
**Type:** Docker Swarm
|
||||
**Verdict:** FAIL
|
||||
|
||||
---
|
||||
|
||||
**SWARM AUDIT RESULTS**
|
||||
|
||||
1. **Homepage labels**:
|
||||
- `homepage.group=Jolly Roger`
|
||||
- `homepage.name=FileBrowser`
|
||||
- `homepage.icon=filebrowser.png`
|
||||
- `homepage.href=http://filebrowser.netgrimoire.com`
|
||||
- `homepage.description=Web-based file manager`
|
||||
**PASS**
|
||||
|
||||
2. **Uptime Kuma labels**:
|
||||
- The deployment does not include Uptime Kuma services or related labels.
|
||||
**FAIL** (Add necessary labels if applicable)
|
||||
|
||||
3. **Caddy labels on exposed services**:
|
||||
- `caddy=filebrowser.netgrimoire.com`
|
||||
- `caddy.reverse_proxy="{{upstreams 80}}"`
|
||||
**PASS**
|
||||
|
||||
4. **Placement constraints**:
|
||||
- The constraint is set to `node.labels.general == true`.
|
||||
**FAIL** (Fix the constraint to reference a valid node label or hostname)
|
||||
|
||||
5. **Volumes use /DockerVol/<service> path convention**:
|
||||
- `/data/nfs/Baxter/Docker/filebrowser/config` and `/data/nfs/Baxter/Docker/filebrowser/srv`
|
||||
**FAIL** (Modify volume paths to conform to the /DockerVol/<service> convention)
|
||||
|
||||
6. **Network references external netgrimoire overlay**:
|
||||
- `networks: - netgrimoire` refers to an external network.
|
||||
**PASS**
|
||||
|
||||
**VERDICT: FAIL**
|
||||
|
||||
Recommendations for fixes:
|
||||
- Add Uptime Kuma labels if necessary.
|
||||
- Correct the placement constraint to reference a valid node label or hostname.
|
||||
- Modify volume paths to use the /DockerVol/<service> convention.
|
||||
Loading…
Add table
Add a link
Reference in a new issue