audit(gremlin): tmm FAIL 2026-05-04

Netgrimoire/Audits/tmm-2026-05-04.md

@@ -0,0 +1,45 @@
+---
+title: Audit - tmm.yaml
+description: Gremlin audit report 2026-05-04
+published: true
+date: 2026-05-04T11:39:31.102Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-05-04T11:39:31.102Z
+---
+
+# Audit Report — tmm.yaml
+
+**Date:** 2026-05-04  
+**File:** swarm/tmm.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+1. **Homepage labels**: 
+   - `homepage.group`: PASS
+   - `homepage.name`: PASS
+   - `homepage.icon`: PASS
+   - `homepage.href`: PASS
+   - `homepage.description`: PASS
+
+2. **Uptime Kuma labels**: 
+   - No Uptime Kuma-related labels are provided. Assuming this is not critical, we will consider it as missing.
+   
+3. **Caddy labels on exposed services**:
+   - `caddy=tmm.netgrimoire.com`: PASS
+   - `caddy.reverse_proxy=tinymediamanager_service:4000`: PASS
+
+4. **Placement constraints**: 
+   - No placement constraints are specified, which is acceptable if there are no specific node requirements.
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - Volumes are currently set to `/data/nfs/Baxter/Docker/tinymediamanager:/config:rw` and `/data/nfs/Baxter:/media:rw`. This does not follow the `/DockerVol/<service>` path convention. **FAIL**: Change volumes to use the `/DockerVol/<service>` format.
+
+6. **Network references external netgrimoire overlay**:
+   - `networks.netgrimoire`: PASS
+
+**VERDICT: FAIL**
+
+Fix required for volume paths to comply with the `/DockerVol/<service>` convention.