audit(gremlin): beszel FAIL 2026-05-04

Netgrimoire/Audits/beszel-2026-05-04.md

@@ -0,0 +1,46 @@
+---
+title: Audit - beszel.yaml
+description: Gremlin audit report 2026-05-04
+published: true
+date: 2026-05-04T11:06:08.221Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-05-04T11:06:08.221Z
+---
+
+# Audit Report — beszel.yaml
+
+**Date:** 2026-05-04  
+**File:** swarm/beszel.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### Audit Results:
+
+1. **Homepage labels**:
+   - `homepage.group`: Monitoring (PASS)
+   - `homepage.name`: Beszel (PASS)
+   - `homepage.icon`: beszel.png (PASS)
+   - `homepage.href`: https://beszel.netgrimoire.com (PASS)
+   - `homepage.description`: Beszel Service (PASS)
+
+2. **Caddy labels on exposed services**:
+   - `caddy=beszel.netgrimoire.com` (PASS)
+   - `caddy.reverse_proxy=beszel:8090` (PASS)
+
+3. **Placement constraints**:
+   - The constraints do not include `node.hostname`. They are set to exclude arm and aarch64 architectures and require nodes labeled with `general == true`. (FAIL) 
+     - **Fix**: Add `node.labels.general == true` to the placement constraints.
+
+4. **Volumes use /DockerVol/<service> path convention**:
+   - The volume `/data/nfs/znas/Docker/beszel:/beszel_data` does not follow the `/DockerVol/<service>` path convention. (FAIL)
+     - **Fix**: Change the volume to `/DockerVol/beszel:/beszel_data`.
+
+5. **Network references external netgrimoire overlay**:
+   - `networks: - netgrimoire` is correctly referencing an external network. (PASS)
+
+### VERDICT: FAIL
+
+One or more issues have been identified that need resolution before the audit can be considered PASS.