audit(gremlin): beszel PASS 2026-04-13

Netgrimoire/Audits/beszel-2026-04-13.md

@@ -0,0 +1,51 @@
+---
+title: Audit - beszel.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:06:58.571Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:06:58.571Z
+---
+
+# Audit Report — beszel.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/beszel.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+**Audit Results**
+
+1. **Homepage labels:**
+   - `homepage.group=Monitoring`: **PASS**
+   - `homepage.name=Beszel`: **PASS**
+   - `homepage.icon=beszel.png`: **FAIL** - Icon path should be relative to the service's directory.
+   - `homepage.href=https://beszel.netgrimoire.com`: **PASS**
+   - `homepage.description=Beszel Service`: **PASS**
+
+2. **Uptime Kuma labels:**
+   - `kuma.beszel.http.name="Beszel"`: **PASS**
+   - `kuma.beszel.http.url=http://beszel:8090`: **PASS**
+
+3. **Caddy labels on exposed services:**
+   - `caddy=beszel.netgrimoire.com`: **PASS**
+   - `caddy.reverse_proxy="{{upstreams 8090}}"`: **FAIL** - Caddy should use the service name (`beszel`) instead of a variable.
+
+4. **Placement constraints:**
+   - `node.labels.general == true`: **PASS**
+
+5. **Volumes use /DockerVol/<service> path convention:**
+   - `/data/nfs/znas/Docker/beszel:/beszel_data`: **FAIL** - Volume should follow the convention of using a subdirectory under `/DockerVol`.
+
+6. **Network references external netgrimoire overlay:**
+   - `netgrimoire`: **PASS**
+
+**Fix Recommendations:**
+- Change `homepage.icon` to a relative path within the service's directory.
+- Update `caddy.reverse_proxy` to use the service name directly (`reverse_proxy http://beszel:8090`).
+- Move the volume to follow the `/DockerVol/<service>` convention, e.g., `/DockerVol/beszel:/beszel_data`.
+
+**VERDICT:** FAIL