audit(gremlin): Calibre-web FAIL 2026-04-03
This commit is contained in:
parent
0d92d5ba78
commit
6327c35482
1 changed files with 20 additions and 19 deletions
|
|
@ -2,10 +2,10 @@
|
||||||
title: Audit - Calibre-web.yaml
|
title: Audit - Calibre-web.yaml
|
||||||
description: Gremlin audit report 2026-04-03
|
description: Gremlin audit report 2026-04-03
|
||||||
published: true
|
published: true
|
||||||
date: 2026-04-03T01:20:03.438Z
|
date: 2026-04-03T01:24:03.658Z
|
||||||
tags: gremlin,audit
|
tags: gremlin,audit
|
||||||
editor: markdown
|
editor: markdown
|
||||||
dateCreated: 2026-04-03T01:20:03.438Z
|
dateCreated: 2026-04-03T01:24:03.658Z
|
||||||
---
|
---
|
||||||
|
|
||||||
# Audit Report — Calibre-web.yaml
|
# Audit Report — Calibre-web.yaml
|
||||||
|
|
@ -17,28 +17,29 @@ dateCreated: 2026-04-03T01:20:03.438Z
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
**SWARM AUDIT REPORT**
|
**Homepage Labels Check**
|
||||||
|
- **PASS**: homepage.group, homepage.name, homepage.description are present.
|
||||||
|
- **FAIL**: homepage.icon is missing. It should point to the location of the Calibre-web.png icon.
|
||||||
|
|
||||||
1. **Homepage labels: homepage.group, homepage.name, homepage.icon, homepage.href, homepage.description**
|
**Uptime Kuma Labels Check**
|
||||||
- **PASS**: All homepage labels are present and correctly configured.
|
- **PASS**: kuma.cwa.http.name and kuma.cwa.http.url are correctly set.
|
||||||
|
|
||||||
2. **Uptime Kuma labels: kuma.<n>.http.name, kuma.<n>.http.url**
|
**Caddy Labels on Exposed Services**
|
||||||
- **FAIL**: Uptime Kuma labels are not defined in the provided YAML file.
|
- **PASS**: caddy label includes both domain names.
|
||||||
**Fix**: Add appropriate Uptime Kuma labels to monitor the service.
|
- **FAIL**: caddy.reverse_proxy is incorrectly pointing to the service name rather than its port. It should be `calibre-web-automated:8083`.
|
||||||
|
|
||||||
3. **Caddy labels on exposed services: caddy=<domain>, caddy.reverse_proxy**
|
**Placement Constraints Check**
|
||||||
- **PASS**: Caddy labels `caddy=books.netgrimoire.com , books.pncharris.com` and `caddy.reverse_proxy=calibre-web-automated:8083` are present.
|
- **PASS**: node.hostname constraint is correctly set for znas.
|
||||||
|
|
||||||
4. **Placement constraints: node.hostname**
|
**Volumes Use /DockerVol/ Path Convention**
|
||||||
- **PASS**: The service is constrained to run on the node with hostname `znas`.
|
- **FAIL**: The volumes are not using the `/DockerVol/<service>` path convention. For example, `- /data/nfs/znas/Data/media/books/library/Netgrimoire:/calibre-library:shared` should be moved to a directory under `/DockerVol`.
|
||||||
|
|
||||||
5. **Volumes use /DockerVol/<service> path convention**
|
**Network References External netgrimoire Overlay**
|
||||||
- **FAIL**: The volume `/data/nfs/znas/Data/media/books/library/Netgrimoire:/calibre-library:shared` does not follow the `/DockerVol/<service>` path convention.
|
- **PASS**: The network references the external `netgrimoire` overlay.
|
||||||
**Fix**: Update the volume path to match the convention, e.g., `/DockerVol/calibre-web-automated`.
|
|
||||||
|
|
||||||
6. **Network references external netgrimoire overlay**
|
|
||||||
- **PASS**: The service uses an external network `netgrimoire` which is correctly referenced.
|
|
||||||
|
|
||||||
**VERDICT: FAIL**
|
**VERDICT: FAIL**
|
||||||
|
|
||||||
The audit found issues with Uptime Kuma labels and the volume path convention that need to be addressed before marking the service as fully compliant.
|
Recommendations:
|
||||||
|
1. Add `homepage.icon: "/path/to/Calibre-web.png"`.
|
||||||
|
2. Correct `caddy.reverse_proxy` to `calibre-web-automated:8083`.
|
||||||
|
3. Move all volumes to follow the `/DockerVol/<service>` path convention.
|
||||||
Loading…
Add table
Add a link
Reference in a new issue