audit(gremlin): kavita FAIL 2026-04-03

Netgrimoire/Audits/kavita-2026-04-03.md

@@ -0,0 +1,52 @@
+---
+title: Audit - kavita.yaml
+description: Gremlin audit report 2026-04-03
+published: true
+date: 2026-04-03T02:58:18.686Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-03T02:58:18.686Z
+---
+
+# Audit Report — kavita.yaml
+
+**Date:** 2026-04-03  
+**File:** swarm/kavita.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+**SWARM AUDIT REPORT**
+
+1. **Homepage labels**: 
+   - `homepage.group`: PASS
+   - `homepage.name`: PASS
+   - `homepage.icon`: PASS
+   - `homepage.href`: PASS
+   - `homepage.description`: PASS
+
+2. **Uptime Kuma labels**:
+   - Missing Uptime Kuma labels (e.g., `kuma.kavita.http.name` and `kuma.kavita.http.url`). These are not defined in the provided configuration.
+   - **FAIL**: Add appropriate Uptime Kuma labels for monitoring.
+
+3. **Caddy labels on exposed services**:
+   - `caddy`: PASS
+   - `caddy.reverse_proxy`: PASS
+
+4. **Placement constraints**:
+   - No placement constraints (e.g., `node.hostname`) specified.
+   - **FAIL**: Consider adding placement constraints if specific nodes are required for service placement.
+
+5. **Volumes use /DockerVol/<service> path convention**:
+   - `/data/nfs/Baxter/Data/media/comics`: FAIL
+     - Volume paths do not follow the `/DockerVol/<service>` convention.
+     - **Fix**: Update volume paths to conform to the convention, e.g., `/DockerVol/kavita/media/comics`.
+
+6. **Network references external netgrimoire overlay**:
+   - `netgrimoire`: PASS
+
+**VERDICT: FAIL**
+
+- The configuration contains several issues that need resolution before it can be considered fully compliant with best practices.
+- Address the Uptime Kuma labels, placement constraints, and volume paths as indicated.