traveler/Netgrimoire
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

audit(gremlin): journiv FAIL 2026-05-04

Browse source
This commit is contained in:
traveler 2026-05-04 06:19:00 -05:00
parent aa6500a69d
commit 512652af93
1 changed files with 25 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

25
Netgrimoire/Audits/journiv-2026-05-04.md Normal file
View file

@ -0,0 +1,25 @@
---
title: Audit - journiv.yaml
description: Gremlin audit report 2026-05-04
published: true
date: 2026-05-04T11:19:00.124Z
tags: gremlin,audit
editor: markdown
dateCreated: 2026-05-04T11:19:00.124Z
---
# Audit Report — journiv.yaml
**Date:** 2026-05-04
**File:** swarm/journiv.yaml
**Type:** Docker Compose
**Verdict:** FAIL
---
PASS Caddyfile configured for admin access on port 2019.
FAIL No explicit entries in the Caddyfile for services exposing ports. Review swarm/journiv.yaml for any service definitions that expose ports and ensure they are correctly referenced in the Caddyfile.
FAIL There are default passwords used in the configuration, especially for Crowdsec. Replace default passwords with secure ones immediately.
FAIL Some services are running in privileged mode. Verify if these privileges are necessary and reduce them to the minimum required for security.
PASS No obvious unnecessary forwarded headers in the Caddyfile.
VERDICT: FAIL