audit(gremlin): SQL-mgmt FAIL 2026-04-20

Netgrimoire/Audits/SQL-mgmt-2026-04-20.md

@@ -0,0 +1,63 @@
+---
+title: Audit - SQL-mgmt.yaml
+description: Gremlin audit report 2026-04-20
+published: true
+date: 2026-04-20T11:03:52.374Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-20T11:03:52.374Z
+---
+
+# Audit Report — SQL-mgmt.yaml
+
+**Date:** 2026-04-20  
+**File:** swarm/SQL-mgmt.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### SWARM AUDIT REPORT
+
+#### 1. Homepage Labels
+**PASS**: All services have the required homepage labels:
+   - `phpmyadmin`
+     - `homepage.group=Management`
+     - `homepage.name=PHPMyadmin`
+     - `homepage.icon=phpmyadmin.png`
+     - `homepage.href=http://phpmyadmin.netgrimoire.com`
+     - `homepage.description=MySQL Manager`
+   - `phppgadmin`
+     - `homepage.group=Management`
+     - `homepage.name=PHPpgmyadmin`
+     - `homepage.icon=phppgmyadmin.png`
+     - `homepage.href=http://phppgmyadmin.netgrimoire.com`
+     - `homepage.description=Postgres Manager`
+
+#### 2. Uptime Kuma Labels
+**FAIL**: The labels for Uptime Kuma are missing from the provided YAML.
+   - **Fix**: Add the required labels for Uptime Kuma under its service definition.
+
+#### 3. Caddy Labels on Exposed Services
+**PASS**: All exposed services have Caddy labels:
+   - `phpmyadmin`
+     - `caddy=phpmyadmin.netgrimoire.com`
+     - `caddy.import=authentik`
+     - `caddy.reverse_proxy="{{upstreams 80}}"
+   - `phppgadmin`
+     - `caddy=phppgmyadmin.netgrimoire.com`
+     - `caddy.import=authentik`
+     - `caddy.reverse_proxy="{{upstreams 80}}"
+
+#### 4. Placement Constraints
+**FAIL**: The placement constraints for node.hostname are missing from the provided YAML.
+   - **Fix**: Add the required placement constraints under each service definition if applicable.
+
+#### 5. Volumes Use /DockerVol/<service> Path Convention
+**FAIL**: No volumes are specified in the provided YAML, so this check is not applicable.
+   - **Fix**: Define volumes with the `/DockerVol/<service>` path convention where needed.
+
+#### 6. Network References External Netgrimoire Overlay
+**PASS**: All services reference an external network named `netgrimoire`.
+
+### VERDICT: FAIL