From 5d9ab51200f895c447c9e558e53abf87552b4b66 Mon Sep 17 00:00:00 2001 From: traveler Date: Thu, 2 Apr 2026 22:00:59 -0500 Subject: [PATCH] audit(gremlin): library FAIL 2026-04-03 --- Netgrimoire/Audits/library-2026-04-03.md | 64 ++++++++++++++++++++++++ 1 file changed, 64 insertions(+) create mode 100644 Netgrimoire/Audits/library-2026-04-03.md diff --git a/Netgrimoire/Audits/library-2026-04-03.md b/Netgrimoire/Audits/library-2026-04-03.md new file mode 100644 index 0000000..ae2397e --- /dev/null +++ b/Netgrimoire/Audits/library-2026-04-03.md @@ -0,0 +1,64 @@ +--- +title: Audit - library.yaml +description: Gremlin audit report 2026-04-03 +published: true +date: 2026-04-03T03:00:59.147Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-03T03:00:59.147Z +--- + +# Audit Report — library.yaml + +**Date:** 2026-04-03 +**File:** swarm/library.yaml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +**SWARM AUDIT REPORT** + +1. **Homepage labels:** + - `homepage.group=Library` + - `homepage.name=Netgrimoire Library` + - `homepage.icon=calibre-web.png` + - `homepage.href=http://books.netgrimoire.com` + - `homepage.description=Curated Library` + + **PASS**: All homepage labels are correctly configured. + +2. **Uptime Kuma labels:** + - `kuma.calibre1.http.name="Calibre-Netgrimoire"` + - `kuma.auth.http.url=http://calibre-netgrimoire:8083` + + **PASS**: Uptime Kuma labels are correctly configured for the Calibre service. + +3. **Caddy labels on exposed services:** + - `caddy=books.netgrimoire.com` + - `caddy.reverse_proxy="{{upstreams 8083}}"` + + **PASS**: Caddy labels are correctly configured to reverse proxy to the Calibre service. + +4. **Placement constraints:** + - `node.labels.general == true` + + **FAIL**: The placement constraint should use `node.hostname` instead of `node.labels.general`. + +5. **Volumes use /DockerVol/ path convention:** + - `/data/nfs/Baxter/Docker/Calibre-netgrimoire/Config:/config` + - `/data/nfs/Baxter/Data:/data:shared` + + **FAIL**: Volumes are not using the recommended `/DockerVol/` path convention. They should be mounted under `/DockerVol/Calibre-Netgrimoire`. + +6. **Network references external netgrimoire overlay:** + - `networks:` + - `- netgrimoire` + + **PASS**: The service is correctly using an external network. + +**VERDICT: FAIL** + +Fixes required: +1. Update the placement constraint to use `node.hostname`. +2. Update volume paths to follow the `/DockerVol/` convention. \ No newline at end of file