diff --git a/Netgrimoire/Audits/portainer-agent-stack-2026-04-13.md b/Netgrimoire/Audits/portainer-agent-stack-2026-04-13.md new file mode 100644 index 0000000..12d34e5 --- /dev/null +++ b/Netgrimoire/Audits/portainer-agent-stack-2026-04-13.md @@ -0,0 +1,44 @@ +--- +title: Audit - portainer-agent-stack.yml +description: Gremlin audit report 2026-04-13 +published: true +date: 2026-04-13T11:31:08.685Z +tags: gremlin,audit +editor: markdown +dateCreated: 2026-04-13T11:31:08.685Z +--- + +# Audit Report — portainer-agent-stack.yml + +**Date:** 2026-04-13 +**File:** swarm/portainer-agent-stack.yml +**Type:** Docker Swarm +**Verdict:** FAIL + +--- + +**Audit Results:** + +1. **Homepage labels: homepage.group, homepage.name, homepage.icon, homepage.href, homepage.description** + - **PASS**: All required labels are present and configured. + +2. **Uptime Kuma labels: kuma..http.name, kuma..http.url** + - **FAIL**: No Uptime Kuma labels found in the configuration. + - **Fix**: Add Uptime Kuma labels under the `deploy` section of the `portainer` service. + +3. **Caddy labels on exposed services: caddy=, caddy.reverse_proxy** + - **PASS**: Caddy labels are present and correctly configured for exposing the Portainer service. + +4. **Placement constraints: node.hostname** + - **FAIL**: A placement constraint is commented out (`# constraints: [node.platform.os == linux]`). + - **Fix**: Uncomment and modify the constraint if necessary, or remove it if not needed. + - **PASS**: An explicit hostname constraint is used for the `portainer` service (`constraints: - node.hostname == znas`). + +5. **Volumes use /DockerVol/ path convention** + - **FAIL**: The volume path `/DockerVol/portainer:/data` does not follow the expected pattern. + - **Fix**: Change the volume path to `/DockerVol/portainer/data`. + +6. **Network references external netgrimoire overlay** + - **PASS**: The `netgrimoire` network is referenced correctly and marked as external. + +**VERDICT: FAIL** \ No newline at end of file