audit(gremlin): SQL-mgmt FAIL 2026-04-03

Netgrimoire/Audits/SQL-mgmt-2026-04-03.md

@@ -0,0 +1,107 @@
+---
+title: Audit - SQL-mgmt.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:34:04.814Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:34:04.814Z
+---
+
+# Audit Report — SQL-mgmt.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/SQL-mgmt.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### SWARM AUDIT REPORT
+
+#### Homepage Labels
+1. **PASS**: `phpmyadmin`
+   - `homepage.group=Management`
+   - `homepage.name=PHPMyadmin`
+   - `homepage.icon=phpmyadmin.png`
+   - `homepage.href=http://phpmyadmin.netgrimoire.com`
+   - `homepage.description=MySQL Manager`
+
+2. **PASS**: `phppgadmin`
+   - `homepage.group=Management`
+   - `homepage.name=PHPpgmyadmin`
+   - `homepage.icon=phppgmyadmin.png`
+   - `homepage.href=http://phppgmyadmin.netgrimoire.com`
+   - `homepage.description=Postgres Manager`
+
+#### Uptime Kuma Labels
+1. **FAIL**: `phpmyadmin` and `phppgadmin`
+   - Missing labels: `kuma.msql.http.name`, `kuma.mealie.http.url`.
+
+2. **FIX**:
+   ```yaml
+   phpmyadmin:
+     deploy:
+       labels:
+         ...
+         kuma.msql.http.name="PHPMyadmin"
+         kuma.msql.http.url=http://phpmyadmin:80
+         ...
+
+   phppgadmin:
+     deploy:
+       labels:
+         ...
+         kuma.mealie.http.url=http://phppgmyadmin:80
+         ...
+   ```
+
+#### Caddy Labels on Exposed Services
+1. **PASS**: `phpmyadmin`
+   - `caddy=phpmyadmin.netgrimoire.com`
+   - `caddy.reverse_proxy="{{upstreams 80}}"`
+   
+2. **PASS**: `phppgadmin`
+   - `caddy=phppgmyadmin.netgrimoire.com`
+   - `caddy.reverse_proxy="{{upstreams 80}}"`
+
+#### Placement Constraints
+1. **FAIL**: Both services are missing placement constraints (`node.hostname`).
+
+2. **FIX**:
+   ```yaml
+   phpmyadmin:
+     deploy:
+       labels:
+         ...
+       placement:
+         constraints:
+           - node.hostname==<desired-hostname>
+
+   phppgadmin:
+     deploy:
+       labels:
+         ...
+       placement:
+         constraints:
+           - node.hostname==<desired-hostname>
+   ```
+
+#### Volumes Use /DockerVol/<service> Path Convention
+1. **FAIL**: Both services are missing volume configurations.
+
+2. **FIX**:
+   ```yaml
+   phpmyadmin:
+     volumes:
+       - /DockerVol/phpmyadmin:/var/lib/mysql
+
+   phppgadmin:
+     volumes:
+       - /DockerVol/phppgadmin:/var/lib/postgresql/data
+   ```
+
+#### Network References External `netgrimoire` Overlay
+1. **PASS**: Both services correctly reference the external network `netgrimoire`.
+
+### VERDICT: FAIL