From 94e5007d24c90b854bd1cdac26cd6fc3477d85bc Mon Sep 17 00:00:00 2001 From: traveler Date: Mon, 13 Apr 2026 06:12:09 -0500 Subject: [PATCH] audit(gremlin): filebrowser PASS 2026-04-13 --- Netgrimoire/Audits/filebrowser-2026-04-13.md | 30 ++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 Netgrimoire/Audits/filebrowser-2026-04-13.md diff --git a/Netgrimoire/Audits/filebrowser-2026-04-13.md b/Netgrimoire/Audits/filebrowser-2026-04-13.md new file mode 100644 index 0000000..ba2fbad --- /dev/null +++ b/Netgrimoire/Audits/filebrowser-2026-04-13.md @@ -0,0 +1,30 @@ +--- +title: Audit - filebrowser.yaml +description: Gremlin audit report 2026-04-13 +published: true +date: 2026-04-13T11:12:09.193Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-13T11:12:09.193Z +--- + +# Audit Report — filebrowser.yaml + +**Date:** 2026-04-13 +**File:** swarm/filebrowser.yaml +**Type:** Docker Swarm +**Verdict:** PASS + +--- + +1. **Homepage labels**: All homepage labels are present. +2. **Uptime Kuma labels**: The `kuma.filebrowser.http.name` label is not following the expected format (missing ``). Fix: Change to `kuma.1.filebrowser.http.name`. +3. **Caddy labels on exposed services**: + - `caddy=filebrowser.netgrimoire.com`: Caddy config issue. `filebrowser.netgrimoire.com` should be an upstream service. + - `caddy.reverse_proxy="{{upstreams 80}}"`: This label is missing the domain for the upstream. Fix: Add the correct upstream domain. +4. **Placement constraints**: The constraint uses `node.labels.general == true`. This should reference a node label, not a general label. Fix: Change to use a specific node label like `node.role == manager`. +5. **Volumes use /DockerVol/ path convention**: + - `/data/nfs/Baxter/Docker/filebrowser/config` and `/data/nfs/Baxter/Docker/filebrowser/srv`: These do not follow the `/DockerVol/` convention. Fix: Move to `/DockerVol/filebrowser/config` and `/DockerVol/filebrowser/srv`. +6. **Network references external netgrimoire overlay**: The network `netgrimoire` is correctly referenced as external. + +**VERDICT:** FAIL \ No newline at end of file