From 64e05e5c80f2f103d34e476975f83ff08417e826 Mon Sep 17 00:00:00 2001 From: traveler Date: Mon, 4 May 2026 06:06:08 -0500 Subject: [PATCH] audit(gremlin): beszel FAIL 2026-05-04 --- Netgrimoire/Audits/beszel-2026-05-04.md | 46 +++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 Netgrimoire/Audits/beszel-2026-05-04.md diff --git a/Netgrimoire/Audits/beszel-2026-05-04.md b/Netgrimoire/Audits/beszel-2026-05-04.md new file mode 100644 index 0000000..f7905e6 --- /dev/null +++ b/Netgrimoire/Audits/beszel-2026-05-04.md @@ -0,0 +1,46 @@ +--- +title: Audit - beszel.yaml +description: Gremlin audit report 2026-05-04 +published: true +date: 2026-05-04T11:06:08.221Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-05-04T11:06:08.221Z +--- + +# Audit Report — beszel.yaml + +**Date:** 2026-05-04 +**File:** swarm/beszel.yaml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +### Audit Results: + +1. **Homepage labels**: + - `homepage.group`: Monitoring (PASS) + - `homepage.name`: Beszel (PASS) + - `homepage.icon`: beszel.png (PASS) + - `homepage.href`: https://beszel.netgrimoire.com (PASS) + - `homepage.description`: Beszel Service (PASS) + +2. **Caddy labels on exposed services**: + - `caddy=beszel.netgrimoire.com` (PASS) + - `caddy.reverse_proxy=beszel:8090` (PASS) + +3. **Placement constraints**: + - The constraints do not include `node.hostname`. They are set to exclude arm and aarch64 architectures and require nodes labeled with `general == true`. (FAIL) + - **Fix**: Add `node.labels.general == true` to the placement constraints. + +4. **Volumes use /DockerVol/ path convention**: + - The volume `/data/nfs/znas/Docker/beszel:/beszel_data` does not follow the `/DockerVol/` path convention. (FAIL) + - **Fix**: Change the volume to `/DockerVol/beszel:/beszel_data`. + +5. **Network references external netgrimoire overlay**: + - `networks: - netgrimoire` is correctly referencing an external network. (PASS) + +### VERDICT: FAIL + +One or more issues have been identified that need resolution before the audit can be considered PASS. \ No newline at end of file