audit(gremlin): monitoring FAIL 2026-04-13

Netgrimoire/Audits/monitoring-2026-04-13.md

@@ -0,0 +1,42 @@
+---
+title: Audit - monitoring.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:26:05.802Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:26:05.802Z
+---
+
+# Audit Report — monitoring.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/monitoring.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### Audit Results:
+
+1. **Homepage Labels**:
+   - **PASS**: All `homepage` labels are present and correctly formatted.
+
+2. **Uptime Kuma Labels**:
+   - **FAIL**: The `kuma.prometheus.http.username` and `kuma.prometheus.http.password` labels are incorrect for Prometheus. These should be specific to the actual Uptime Kuma instance that will import them.
+     - **Fix**: Correct these labels to match the Uptime Kuma service importing metrics.
+
+3. **Caddy Labels**:
+   - **PASS**: All Caddy-related labels are correctly set up with domain mappings and reverse proxy configurations.
+
+4. **Placement Constraints**:
+   - **FAIL**: The constraint `node.hostname == znas` does not account for potential variations or failures in hostname matching.
+     - **Fix**: Replace `node.hostname == znas` with more flexible constraints like `node.labels.environment == production`.
+
+5. **Volumes Usage**:
+   - **PASS**: All volumes follow the `/DockerVol/<service>` path convention.
+
+6. **Network References**:
+   - **PASS**: All services reference the external `netgrimoire` network correctly.
+
+### VERDICT: FAIL