From f174ec231a3bd27179d9883c617f7d850eae0488 Mon Sep 17 00:00:00 2001
From: traveler <traveler@wasted-bandwidth.net>
Date: Mon, 13 Apr 2026 06:06:58 -0500
Subject: [PATCH] audit(gremlin): beszel PASS 2026-04-13

---
 Netgrimoire/Audits/beszel-2026-04-13.md | 51 +++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 Netgrimoire/Audits/beszel-2026-04-13.md

diff --git a/Netgrimoire/Audits/beszel-2026-04-13.md b/Netgrimoire/Audits/beszel-2026-04-13.md
new file mode 100644
index 0000000..8878e8f
--- /dev/null
+++ b/Netgrimoire/Audits/beszel-2026-04-13.md
@@ -0,0 +1,51 @@
+---
+title: Audit - beszel.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:06:58.571Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:06:58.571Z
+---
+
+# Audit Report — beszel.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/beszel.yaml  
+**Type:** Docker Swarm  
+**Verdict:** PASS
+
+---
+
+**Audit Results**
+
+1. **Homepage labels:**
+   - `homepage.group=Monitoring`: **PASS**
+   - `homepage.name=Beszel`: **PASS**
+   - `homepage.icon=beszel.png`: **FAIL** - Icon path should be relative to the service's directory.
+   - `homepage.href=https://beszel.netgrimoire.com`: **PASS**
+   - `homepage.description=Beszel Service`: **PASS**
+
+2. **Uptime Kuma labels:**
+   - `kuma.beszel.http.name="Beszel"`: **PASS**
+   - `kuma.beszel.http.url=http://beszel:8090`: **PASS**
+
+3. **Caddy labels on exposed services:**
+   - `caddy=beszel.netgrimoire.com`: **PASS**
+   - `caddy.reverse_proxy="{{upstreams 8090}}"`: **FAIL** - Caddy should use the service name (`beszel`) instead of a variable.
+
+4. **Placement constraints:**
+   - `node.labels.general == true`: **PASS**
+
+5. **Volumes use /DockerVol/<service> path convention:**
+   - `/data/nfs/znas/Docker/beszel:/beszel_data`: **FAIL** - Volume should follow the convention of using a subdirectory under `/DockerVol`.
+
+6. **Network references external netgrimoire overlay:**
+   - `netgrimoire`: **PASS**
+
+**Fix Recommendations:**
+- Change `homepage.icon` to a relative path within the service's directory.
+- Update `caddy.reverse_proxy` to use the service name directly (`reverse_proxy http://beszel:8090`).
+- Move the volume to follow the `/DockerVol/<service>` convention, e.g., `/DockerVol/beszel:/beszel_data`.
+
+**VERDICT:** FAIL
\ No newline at end of file