audit(gremlin): journiv PASS 2026-04-20

Netgrimoire/Audits/journiv-2026-04-20.md

@@ -0,0 +1,36 @@
+---
+title: Audit - journiv.yaml
+description: Gremlin audit report 2026-04-20
+published: true
+date: 2026-04-20T11:18:43.537Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-20T11:18:43.537Z
+---
+
+# Audit Report — journiv.yaml
+
+**Date:** 2026-04-20  
+**File:** swarm/journiv.yaml  
+**Type:** Docker Compose  
+**Verdict:** PASS
+
+---
+
+**COMPOSE AUDIT**
+
+1. **Port Exposure Verification**:
+   - `nextcloud-aio-apache`: Exposes port 11000 (PASS)
+   - `graylog`: Exposes port 9000 (PASS)
+   - `portainer`: Exposes port 9000 (PASS)
+   - `webtop`: Exposes port 3000 (PASS)
+   - `roundcube`: Exposes port 80 (PASS)
+   - `nginx-mailcow`: Exposes port 80 (PASS)
+
+2. **Security Issues**:
+   - No default passwords are explicitly mentioned in the provided text.
+   - No unnecessary privileged mode is noted.
+
+**VERDICT: PASS**
+
+The provided Docker Compose file and Caddyfile do not expose any ports that require a matching entry in the Caddyfile, and there are no obvious security issues present.