From a44b8f1354e99656f34c2cda39ac8903634e68a6 Mon Sep 17 00:00:00 2001 From: traveler Date: Thu, 2 Apr 2026 22:25:48 -0500 Subject: [PATCH] audit(gremlin): web FAIL 2026-04-03 --- Netgrimoire/Audits/web-2026-04-03.md | 45 ++++++++++++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 Netgrimoire/Audits/web-2026-04-03.md diff --git a/Netgrimoire/Audits/web-2026-04-03.md b/Netgrimoire/Audits/web-2026-04-03.md new file mode 100644 index 0000000..05eccb7 --- /dev/null +++ b/Netgrimoire/Audits/web-2026-04-03.md @@ -0,0 +1,45 @@ +--- +title: Audit - web.yaml +description: Gremlin audit report 2026-04-03 +published: true +date: 2026-04-03T03:25:48.458Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-03T03:25:48.458Z +--- + +# Audit Report — web.yaml + +**Date:** 2026-04-03 +**File:** swarm/web.yaml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +1. **Homepage labels**: + - `homepage.name` is present. + - `homepage.icon` is present. + - `homepage.href` is missing. Add it with the appropriate value. + - `homepage.description` is missing. Consider adding a description for clarity. + +2. **Uptime Kuma labels**: + - `kuma.web.http.name` is present. + - `kuma.web.http.url` is present. + +3. **Caddy labels on exposed services**: + - `caddy=www.netgrimoire.com` is present. + - `caddy.reverse_proxy="web:80"` is present. + +4. **Placement constraints**: + - `node.labels.cpu == amd` is present, but it should be `node.labels.cpu == "amd"` for better readability. + +5. **Volumes use `/DockerVol/` path convention**: + - The volumes are not using the `/DockerVol/` path convention. They are located at `/data/nfs/znas/Docker/web/pages` and `/data/nfs/znas/Docker/web/apache`. Consider creating a symbolic link or moving these volumes to follow the convention. + +6. **Network references external `netgrimoire` overlay**: + - The network is correctly referencing an external `netgrimoire` overlay. + +**VERDICT: FAIL** + +The homepage labels are missing `homepage.href` and `homepage.description`. Additionally, the volumes need to be moved or symlinked to follow the `/DockerVol/` path convention. \ No newline at end of file