audit(gremlin): Calibre-web FAIL 2026-04-03
This commit is contained in:
parent
0d92d5ba78
commit
6327c35482
1 changed files with 20 additions and 19 deletions
|
|
@ -2,10 +2,10 @@
|
|||
title: Audit - Calibre-web.yaml
|
||||
description: Gremlin audit report 2026-04-03
|
||||
published: true
|
||||
date: 2026-04-03T01:20:03.438Z
|
||||
date: 2026-04-03T01:24:03.658Z
|
||||
tags: gremlin,audit
|
||||
editor: markdown
|
||||
dateCreated: 2026-04-03T01:20:03.438Z
|
||||
dateCreated: 2026-04-03T01:24:03.658Z
|
||||
---
|
||||
|
||||
# Audit Report — Calibre-web.yaml
|
||||
|
|
@ -17,28 +17,29 @@ dateCreated: 2026-04-03T01:20:03.438Z
|
|||
|
||||
---
|
||||
|
||||
**SWARM AUDIT REPORT**
|
||||
**Homepage Labels Check**
|
||||
- **PASS**: homepage.group, homepage.name, homepage.description are present.
|
||||
- **FAIL**: homepage.icon is missing. It should point to the location of the Calibre-web.png icon.
|
||||
|
||||
1. **Homepage labels: homepage.group, homepage.name, homepage.icon, homepage.href, homepage.description**
|
||||
- **PASS**: All homepage labels are present and correctly configured.
|
||||
**Uptime Kuma Labels Check**
|
||||
- **PASS**: kuma.cwa.http.name and kuma.cwa.http.url are correctly set.
|
||||
|
||||
2. **Uptime Kuma labels: kuma.<n>.http.name, kuma.<n>.http.url**
|
||||
- **FAIL**: Uptime Kuma labels are not defined in the provided YAML file.
|
||||
**Fix**: Add appropriate Uptime Kuma labels to monitor the service.
|
||||
**Caddy Labels on Exposed Services**
|
||||
- **PASS**: caddy label includes both domain names.
|
||||
- **FAIL**: caddy.reverse_proxy is incorrectly pointing to the service name rather than its port. It should be `calibre-web-automated:8083`.
|
||||
|
||||
3. **Caddy labels on exposed services: caddy=<domain>, caddy.reverse_proxy**
|
||||
- **PASS**: Caddy labels `caddy=books.netgrimoire.com , books.pncharris.com` and `caddy.reverse_proxy=calibre-web-automated:8083` are present.
|
||||
**Placement Constraints Check**
|
||||
- **PASS**: node.hostname constraint is correctly set for znas.
|
||||
|
||||
4. **Placement constraints: node.hostname**
|
||||
- **PASS**: The service is constrained to run on the node with hostname `znas`.
|
||||
**Volumes Use /DockerVol/ Path Convention**
|
||||
- **FAIL**: The volumes are not using the `/DockerVol/<service>` path convention. For example, `- /data/nfs/znas/Data/media/books/library/Netgrimoire:/calibre-library:shared` should be moved to a directory under `/DockerVol`.
|
||||
|
||||
5. **Volumes use /DockerVol/<service> path convention**
|
||||
- **FAIL**: The volume `/data/nfs/znas/Data/media/books/library/Netgrimoire:/calibre-library:shared` does not follow the `/DockerVol/<service>` path convention.
|
||||
**Fix**: Update the volume path to match the convention, e.g., `/DockerVol/calibre-web-automated`.
|
||||
|
||||
6. **Network references external netgrimoire overlay**
|
||||
- **PASS**: The service uses an external network `netgrimoire` which is correctly referenced.
|
||||
**Network References External netgrimoire Overlay**
|
||||
- **PASS**: The network references the external `netgrimoire` overlay.
|
||||
|
||||
**VERDICT: FAIL**
|
||||
|
||||
The audit found issues with Uptime Kuma labels and the volume path convention that need to be addressed before marking the service as fully compliant.
|
||||
Recommendations:
|
||||
1. Add `homepage.icon: "/path/to/Calibre-web.png"`.
|
||||
2. Correct `caddy.reverse_proxy` to `calibre-web-automated:8083`.
|
||||
3. Move all volumes to follow the `/DockerVol/<service>` path convention.
|
||||
Loading…
Add table
Add a link
Reference in a new issue