audit(gremlin): gremlin-stack FAIL 2026-05-04

Netgrimoire/Audits/gremlin-stack-2026-05-04.md

@@ -0,0 +1,48 @@
+---
+title: Audit - gremlin-stack.yml
+description: Gremlin audit report 2026-05-04
+published: true
+date: 2026-05-04T11:48:41.301Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-05-04T11:48:41.301Z
+---
+
+# Audit Report — gremlin-stack.yml
+
+**Date:** 2026-05-04  
+**File:** swarm/stack/Gremlin/gremlin-stack.yml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### SWARM AUDIT REPORT
+
+#### Homepage Labels (1)
+**PASS**: All services have the required homepage labels.
+
+#### Uptime Kuma Labels (2)
+**FAIL**: 
+- `ollama`: Missing `kuma.ollama.http.name` and `kuma.ollama.http.url`.
+- Fix: Add the missing labels to the `ollama` service deploy block.
+  
+**PASS**: All other services have the required kuma labels.
+
+#### Caddy Labels on Exposed Services (3)
+**FAIL**:
+- `open-webui`: Missing `caddy=<domain>` and `caddy.reverse_proxy`.
+- Fix: Add the missing caddy labels to the `open-webui` service deploy block.
+  
+**PASS**: All other services have the required caddy labels.
+
+#### Placement Constraints (4)
+**PASS**: All services are constrained to run on `node.hostname == docker4`.
+
+#### Volumes Use /DockerVol/<service> Path Convention (5)
+**PASS**: All services use the `/DockerVol/<service>` path convention for volumes.
+
+#### Network References External netgrimoire Overlay (6)
+**PASS**: All services reference the external `netgrimoire` network.
+
+### VERDICT: FAIL