audit(gremlin): gremlin-stack FAIL 2026-04-20

Netgrimoire/Audits/gremlin-stack-2026-04-20.md

@@ -0,0 +1,45 @@
+---
+title: Audit - gremlin-stack.yml
+description: Gremlin audit report 2026-04-20
+published: true
+date: 2026-04-20T11:46:33.958Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-20T11:46:33.958Z
+---
+
+# Audit Report — gremlin-stack.yml
+
+**Date:** 2026-04-20  
+**File:** swarm/stack/Gremlin/gremlin-stack.yml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**Audit Report for Gremlin Stack**
+
+1. **Homepage Labels**
+   - **PASS**: All services have `homepage.group`, `homepage.name`, `homepage.icon`, and `homepage.description`.
+   - **FAIL**: Missing `homepage.href` for `qdrant`. Add `homepage.href=http://qdrant.netgrimoire.com:6333/dashboard`.
+
+2. **Uptime Kuma Labels**
+   - **PASS**: All services have `kuma.<n>.http.name` and `kuma.<n>.http.url` correctly labeled.
+
+3. **Caddy Labels on Exposed Services**
+   - **FAIL**: Only `open-webui` has Caddy labels (`caddy=ai.netgrimoire.com`, `caddy.reverse_proxy=open-webui:8080`). Add similar labels for other exposed services.
+   
+4. **Placement Constraints**
+   - **PASS**: All services have a `node.hostname` constraint.
+
+5. **Volumes Use /DockerVol/<service> Path Convention**
+   - **PASS**: All volumes follow the `/DockerVol/<service>` path convention.
+
+6. **Network References External netgrimoire Overlay**
+   - **PASS**: All services reference the external `netgrimoire` network.
+
+**VERDICT: FAIL**
+
+Fixes:
+- Add `homepage.href=http://qdrant.netgrimoire.com:6333/dashboard` to `qdrant`.
+- Add Caddy labels for other exposed services.