audit(gremlin): ollama PASS 2026-04-13

Netgrimoire/Audits/ollama-2026-04-13.md

@@ -0,0 +1,67 @@
+---
+title: Audit - ollama.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:29:26.676Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:29:26.676Z
+---
+
+# Audit Report — ollama.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/ollama.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+### SWARM AUDIT
+
+1. **Homepage labels**: All services have the required homepage labels correctly configured.
+   - `ollama`, `open-webui`, `qdrant`, and `n8n` all have:
+     - `homepage.group`
+     - `homepage.name`
+     - `homepage.icon`
+     - `homepage.href`
+     - `homepage.description`
+
+2. **Uptime Kuma labels**: All services have the required Kuma labels correctly configured.
+   - `ollama`, `open-webui`, and `qdrant` all have:
+     - `kuma.<n>.http.name`
+     - `kuma.<n>.http.url`
+
+3. **Caddy labels on exposed services**: Caddy labels are present on `open-webui` and `n8n`.
+   - `open-webui` has:
+     ```yaml
+     - caddy=ai.netgrimoire.com
+     - caddy.reverse_proxy={{upstreams 8080}}
+     ```
+   - `n8n` has:
+     ```yaml
+     - caddy=n8n.netgrimoire.com
+     - caddy.reverse_proxy={{upstreams 5678}}
+     ```
+
+4. **Placement constraints**: All services are correctly constrained to run on `docker4`.
+   - `ollama`, `open-webui`, `qdrant`, and `n8n` all have:
+     ```yaml
+     constraints:
+       - node.hostname == docker4
+     ```
+
+5. **Volumes use `/DockerVol/<service>` path convention**: All services are using the correct volume path convention.
+   - `ollama`: `/DockerVol/ollama:/root/.ollama`
+   - `open-webui`: `/DockerVol/open-webui:/app/backend/data`
+   - `qdrant`: `/DockerVol/qdrant:/qdrant/storage`
+   - `n8n`: `/DockerVol/n8n:/home/node/.n8n` and `/export/Docker/n8n/workflows:/home/node/.n8n/workflows`
+
+6. **Network references external `netgrimoire` overlay**: The services all correctly reference the external `netgrimoire` network.
+   - All services have:
+     ```yaml
+     networks:
+       - netgrimoire
+     ```
+
+### VERDICT: PASS