audit(gremlin): library FAIL 2026-04-20

Netgrimoire/Audits/library-2026-04-20.md

@@ -0,0 +1,50 @@
+---
+title: Audit - library.yaml
+description: Gremlin audit report 2026-04-20
+published: true
+date: 2026-04-20T11:21:20.033Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-20T11:21:20.033Z
+---
+
+# Audit Report — library.yaml
+
+**Date:** 2026-04-20  
+**File:** swarm/library.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+1. **Homepage labels**: All labels are present.
+   - `homepage.group=Library`
+   - `homepage.name=Netgrimoire Library`
+   - `homepage.icon=calibre-web.png`
+   - `homepage.href=http://books.netgrimoire.com`
+   - `homepage.description=Curated Library`
+
+2. **Uptime Kuma labels**: 
+   - Labels for Uptime Kuma are missing.
+
+3. **Caddy labels on exposed services**:
+   - `caddy=books.netgrimoire.com`
+   - `caddy.reverse_proxy="{{upstreams 8083}}"` is correctly formatted, but it should be `caddy.reverse_proxy="http://calibre-netgrimoire:8083"` for clarity.
+
+4. **Placement constraints**: 
+   - The constraint `- node.labels.general == true` assumes a label exists on the nodes, which needs verification in your environment.
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - Volumes are not following the `/DockerVol/<service>` path convention.
+
+6. **Network references external netgrimoire overlay**: 
+   - The `netgrimoire` network is correctly referencing an external network.
+
+### FIXES:
+
+- Add Uptime Kuma labels.
+- Correct the Caddy reverse proxy URL format.
+- Ensure volume paths follow `/DockerVol/<service>` convention.
+- Verify and correct any missing or incorrect node labels for placement constraints.
+
+### VERDICT: FAIL