audit(gremlin): gremlin-stack FAIL 2026-04-27

Netgrimoire/Audits/gremlin-stack-2026-04-27.md

@@ -0,0 +1,43 @@
+---
+title: Audit - gremlin-stack.yml
+description: Gremlin audit report 2026-04-27
+published: true
+date: 2026-04-27T11:46:27.871Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-27T11:46:27.871Z
+---
+
+# Audit Report — gremlin-stack.yml
+
+**Date:** 2026-04-27  
+**File:** swarm/stack/Gremlin/gremlin-stack.yml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**Audit Results:**
+
+1. **Homepage labels:** 
+   - PASS: `ollama`, `open-webui`, `qdrant`, `n8n` all have the required homepage labels.
+
+2. **Uptime Kuma labels:** 
+   - PASS: No specific Kuma services defined in your stack, hence not applicable.
+
+3. **Caddy labels on exposed services:** 
+   - FAIL: Only `open-webui` and `n8n` have Caddy labels.
+     - Fix: Add Caddy labels to other exposed services (`ollama`, `qdrant`).
+
+4. **Placement constraints:** 
+   - PASS: All services are constrained to `node.hostname == docker4`.
+
+5. **Volumes use /DockerVol/<service> path convention:** 
+   - PASS: All volumes follow the required convention.
+
+6. **Network references external netgrimoire overlay:** 
+   - PASS: All services reference the `netgrimoire` network, which is marked as external.
+
+**VERDICT: FAIL**
+
+Note: The Caddy labels should be added to all exposed services for a complete audit pass.