audit(gremlin): kuma FAIL 2026-04-03

Netgrimoire/Audits/kuma-2026-04-03.md

@@ -0,0 +1,44 @@
+---
+title: Audit - kuma.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:59:59.242Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:59:59.242Z
+---
+
+# Audit Report — kuma.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/kuma.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**SWARM AUDIT**
+
+1. **Homepage labels**: 
+   - **PASS**: homepage.group=Monitoring, homepage.name=Kuma Uptime, homepage.icon=kuma.png, homepage.href=https://kuma.netgrimoire.com, homepage.description=Services Monitor
+
+2. **Uptime Kuma labels**:
+   - **FAIL**: No labels found for Uptime Kuma service.
+     - **Fix**: Add appropriate labels to the Uptime Kuma service under the `labels` section.
+
+3. **Caddy labels on exposed services**:
+   - **PASS**: caddy=kuma.netgrimoire.com, caddy.reverse_proxy=kuma:3001
+
+4. **Placement constraints**:
+   - **FAIL**: node.hostname constraint for autokuma service does not match the provided fix.
+     - **Fix**: Use `node.role == manager` instead of `node.hostname`.
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - **PASS**: All volumes follow the /DockerVol/<service> path convention.
+
+6. **Network references external netgrimoire overlay**:
+   - **PASS**: The swarm uses an external network netgrimoire.
+
+**VERDICT: FAIL**
+
+- Missing or incorrect labels for Uptime Kuma and placement constraints for autokuma service are preventing the audit from being PASS.