audit(gremlin): glance FAIL 2026-04-27

Netgrimoire/Audits/glance-2026-04-27.md

@@ -0,0 +1,34 @@
+---
+title: Audit - glance.yaml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:14:34.840Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:14:34.840Z
+---
+
+# Audit Report — glance.yaml
+
+**Date:** 2026-04-27  
+**File:** swarm/glance.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+1. Homepage labels: **PASS** - All specified labels are present.
+2. Uptime Kuma labels:
+   - `kuma.glance.http.name`: **PASS**
+   - `kuma.glance.http.url`: **PASS**
+3. Caddy labels on exposed services:
+   - `caddy=home.netgrimoire.com`: **PASS** (Correct domain)
+   - `caddy.reverse_proxy: "glance:8080"`: **PASS** (Correct reverse proxy setting)
+4. Placement constraints: **FAIL** - There is no `node.hostname` or any other placement constraints specified.
+5. Volumes use `/DockerVol/<service>` path convention:
+   - `/data/nfs/znas/Docker/glance`: **FAIL** - The volume path does not follow the `/DockerVol/<service>` convention.
+6. Network references external netgrimoire overlay: **PASS** - The `netgrimoire` network is marked as `external`.
+
+**VERDICT: FAIL**
+
+The configuration lacks essential placement constraints, adheres to a consistent Docker volume naming convention, and has missing or incorrectly set Caddy labels for other services if applicable.