audit(gremlin): Calibre-web FAIL 2026-04-03

This commit is contained in:
traveler 2026-04-02 20:24:03 -05:00
parent 0d92d5ba78
commit 6327c35482

View file

@ -2,10 +2,10 @@
title: Audit - Calibre-web.yaml title: Audit - Calibre-web.yaml
description: Gremlin audit report 2026-04-03 description: Gremlin audit report 2026-04-03
published: true published: true
date: 2026-04-03T01:20:03.438Z date: 2026-04-03T01:24:03.658Z
tags: gremlin,audit tags: gremlin,audit
editor: markdown editor: markdown
dateCreated: 2026-04-03T01:20:03.438Z dateCreated: 2026-04-03T01:24:03.658Z
--- ---
# Audit Report — Calibre-web.yaml # Audit Report — Calibre-web.yaml
@ -17,28 +17,29 @@ dateCreated: 2026-04-03T01:20:03.438Z
--- ---
**SWARM AUDIT REPORT** **Homepage Labels Check**
- **PASS**: homepage.group, homepage.name, homepage.description are present.
- **FAIL**: homepage.icon is missing. It should point to the location of the Calibre-web.png icon.
1. **Homepage labels: homepage.group, homepage.name, homepage.icon, homepage.href, homepage.description** **Uptime Kuma Labels Check**
- **PASS**: All homepage labels are present and correctly configured. - **PASS**: kuma.cwa.http.name and kuma.cwa.http.url are correctly set.
2. **Uptime Kuma labels: kuma.<n>.http.name, kuma.<n>.http.url** **Caddy Labels on Exposed Services**
- **FAIL**: Uptime Kuma labels are not defined in the provided YAML file. - **PASS**: caddy label includes both domain names.
**Fix**: Add appropriate Uptime Kuma labels to monitor the service. - **FAIL**: caddy.reverse_proxy is incorrectly pointing to the service name rather than its port. It should be `calibre-web-automated:8083`.
3. **Caddy labels on exposed services: caddy=<domain>, caddy.reverse_proxy** **Placement Constraints Check**
- **PASS**: Caddy labels `caddy=books.netgrimoire.com , books.pncharris.com` and `caddy.reverse_proxy=calibre-web-automated:8083` are present. - **PASS**: node.hostname constraint is correctly set for znas.
4. **Placement constraints: node.hostname** **Volumes Use /DockerVol/ Path Convention**
- **PASS**: The service is constrained to run on the node with hostname `znas`. - **FAIL**: The volumes are not using the `/DockerVol/<service>` path convention. For example, `- /data/nfs/znas/Data/media/books/library/Netgrimoire:/calibre-library:shared` should be moved to a directory under `/DockerVol`.
5. **Volumes use /DockerVol/<service> path convention** **Network References External netgrimoire Overlay**
- **FAIL**: The volume `/data/nfs/znas/Data/media/books/library/Netgrimoire:/calibre-library:shared` does not follow the `/DockerVol/<service>` path convention. - **PASS**: The network references the external `netgrimoire` overlay.
**Fix**: Update the volume path to match the convention, e.g., `/DockerVol/calibre-web-automated`.
6. **Network references external netgrimoire overlay**
- **PASS**: The service uses an external network `netgrimoire` which is correctly referenced.
**VERDICT: FAIL** **VERDICT: FAIL**
The audit found issues with Uptime Kuma labels and the volume path convention that need to be addressed before marking the service as fully compliant. Recommendations:
1. Add `homepage.icon: "/path/to/Calibre-web.png"`.
2. Correct `caddy.reverse_proxy` to `calibre-web-automated:8083`.
3. Move all volumes to follow the `/DockerVol/<service>` path convention.