audit(gremlin): portainer-agent-stack FAIL 2026-05-04

Netgrimoire/Audits/portainer-agent-stack-2026-05-04.md

@@ -0,0 +1,47 @@
+---
+title: Audit - portainer-agent-stack.yml
+description: Gremlin audit report 2026-05-04
+published: true
+date: 2026-05-04T11:33:13.652Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-05-04T11:33:13.652Z
+---
+
+# Audit Report — portainer-agent-stack.yml
+
+**Date:** 2026-05-04  
+**File:** swarm/portainer-agent-stack.yml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### Swarm Audit Summary:
+
+1. **Homepage Labels**:
+   - `homepage.group`: Passed, value is "Management"
+   - `homepage.name`: Passed, value is "Portainer"
+   - `homepage.icon`: Failed, no icon specified.
+     - **Fix**: Add an icon path to the label.
+   - `homepage.href`: Passed, value is "http://docker.netgrimoire.com"
+   - `homepage.description`: Passed, value is "Docker Manager"
+
+2. **Uptime Kuma Labels**:
+   - No labels related to Uptime Kuma found in this stack.
+
+3. **Caddy Labels on Exposed Services**:
+   - `caddy=docker.netgrimoire.com`: Passed
+   - `caddy.reverse_proxy="http://portainer:9000"`: Passed
+
+4. **Placement Constraints**:
+   - `node.hostname == znas`: Passed, only placed on node named "znas".
+
+5. **Volumes Use /DockerVol/<service> Path Convention**:
+   - Volume for `portainer`: `/DockerVol/portainer` - Passed
+   - Volume for `agent`: Not specified in the stack.
+
+6. **Network References External netgrimoire Overlay**:
+   - Network `netgrimoire`: Passed, references an external network.
+
+### VERDICT: FAIL