audit(gremlin): configarr FAIL 2026-04-03

Netgrimoire/Audits/configarr-2026-04-03.md

@@ -0,0 +1,54 @@
+---
+title: Audit - configarr.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:43:33.261Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:43:33.261Z
+---
+
+# Audit Report — configarr.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/configarr.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### SWARM AUDIT RESULTS
+
+1. **Homepage labels**:
+   - `homepage.group`: "Jolly Roger" (PASS)
+   - `homepage.name`: "Configarr" (PASS)
+   - `homepage.icon`: "si-config" (PASS)
+   - `homepage.href`: "https://configarr.netgrimoire.com" (PASS)
+   - `homepage.description`: "Automatically sync TRaSH formats & configs" (PASS)
+
+2. **Uptime Kuma labels**:
+   - Missing Uptime Kuma labels (`kuma.configarr.http.name` and `kuma.configarr.http.url`). These are critical for monitoring and should be added. 
+
+3. **Caddy labels on exposed services**:
+   - `caddy=configarr.netgrimoire.com` (PASS)
+   - `caddy.reverse_proxy: "{{upstreams 8000}}"` (PASS)
+
+4. **Placement constraints**: 
+   - No placement constraints specified (`node.hostname`). This is acceptable if there are no specific node requirements.
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - Volumes do not follow the `/DockerVol/<service>` path convention. They should be adjusted as follows:
+     ```yaml
+     volumes:
+       - /data/nfs/Baxter/Docker/configarr/config:/DockerVol/configarr/config
+       - /data/nfs/Baxter/Docker/configarr/repos:/DockerVol/configarr/repos
+       - /data/nfs/Baxter/Docker/configarr/cfs:/DockerVol/configarr/cfs
+       - /data/nfs/Baxter/Docker/configarr/templates:/DockerVol/configarr/templates
+     ```
+
+6. **Network references external netgrimoire overlay**:
+   - Network `netgrimoire` is correctly referencing an external overlay (PASS)
+
+### VERDICT: FAIL
+
+The configuration includes critical issues that need to be addressed for it to meet the required standards, specifically missing Uptime Kuma labels and incorrect volume paths.