diff --git a/Netgrimoire/Audits/caddy-1-2026-04-27.md b/Netgrimoire/Audits/caddy-1-2026-04-27.md new file mode 100644 index 0000000..7d56bd3 --- /dev/null +++ b/Netgrimoire/Audits/caddy-1-2026-04-27.md @@ -0,0 +1,62 @@ +--- +title: Audit - caddy-1.yaml +description: Gremlin audit report 2026-04-27 +published: true +date: 2026-04-27T11:47:24.293Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-27T11:47:24.293Z +--- + +# Audit Report — caddy-1.yaml + +**Date:** 2026-04-27 +**File:** swarm/stack/caddy/caddy-1.yaml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +### Audit Report for swarm/stack/caddy/caddy-1.yaml + +#### Homepage Labels (1) +- **PASS**: No homepage labels are present in the file. + +#### Uptime Kuma Labels (2) +- **FAIL**: Uptime Kuma labels are missing. + - **Fix**: Add the following labels: + ```yaml + labels: + kuma.0.http.name: "Uptime Kuma" + kuma.0.http.url: "http://uptime-kuma.service.netgrimoire.internal" + ``` + +#### Caddy Labels on Exposed Services (3) +- **PASS**: The `caddy` service does not have explicit labels for `caddy=` or `caddy.reverse_proxy`. These are inferred from the environment and volumes. + +#### Placement Constraints (4) +- **PASS**: The placement constraint is correctly set to run only on a node with the hostname `znas`. + +#### Volumes Use /DockerVol/ Path Convention (5) +- **FAIL**: Volumes are not using the `/DockerVol/` path convention. + - **Fix**: Modify volume paths as follows: + ```yaml + volumes: + - /var/run/docker.sock:/var/run/docker.sock + - /export/Docker/caddy/Caddyfile:/etc/caddy/Caddyfile + - /export/Docker/caddy:/data + # - /export/Docker/caddy/logs:/var/log/caddy # Mount logs for CrowdSec + ``` + To: + ```yaml + volumes: + - /DockerVol/caddy/docker.sock:/var/run/docker.sock + - /DockerVol/caddy/Caddyfile:/etc/caddy/Caddyfile + - /DockerVol/caddy:/data + # - /export/Docker/caddy/logs:/var/log/caddy # Mount logs for CrowdSec + ``` + +#### Network References External Netgrimoire Overlay (6) +- **PASS**: The `netgrimoire` network is correctly referenced as an external network. + +### VERDICT: FAIL \ No newline at end of file