audit(gremlin): diun FAIL 2026-04-03

Netgrimoire/Audits/diun-2026-04-03.md

@@ -0,0 +1,42 @@
+---
+title: Audit - diun.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:46:19.248Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:46:19.248Z
+---
+
+# Audit Report — diun.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/diun.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**Audit Results for swarm/diun.yaml**
+
+1. **Homepage labels**: No homepage labels defined in the file.
+   - **Fix**: Add appropriate homepage labels if applicable.
+
+2. **Uptime Kuma labels**: No Uptime Kuma labels defined in the file.
+   - **Fix**: Add appropriate Uptime Kuma labels if applicable.
+
+3. **Caddy labels on exposed services**: Caddy labels are missing for this service.
+   - **Fix**: Add Caddy labels if needed, e.g., `caddy=example.com,caddy.reverse_proxy=http://localhost:80`.
+
+4. **Placement constraints**: The constraint is set to run only on manager nodes, which is appropriate.
+   - **PASS**: Placement constraints are correctly defined.
+
+5. **Volumes use /DockerVol/<service> path convention**: The volume uses `/data/nfs/znas/Docker/diun`, which does not follow the `/DockerVol/<service>` convention.
+   - **Fix**: Update the volume path to follow the convention, e.g., `/DockerVol/diun`.
+
+6. **Network references external netgrimoire overlay**: The network `netgrimoire` is correctly referencing an external overlay network.
+   - **PASS**: Network reference is correct.
+
+**VERDICT: FAIL**
+
+The volume path does not follow the recommended convention, and additional labels for homepage, Uptime Kuma, and Caddy are missing.