diff --git a/Netgrimoire/Audits/authelia-2026-04-03.md b/Netgrimoire/Audits/authelia-2026-04-03.md index 58aadbf..02e9a59 100644 --- a/Netgrimoire/Audits/authelia-2026-04-03.md +++ b/Netgrimoire/Audits/authelia-2026-04-03.md @@ -2,10 +2,10 @@ title: Audit - authelia.yaml description: Gremlin audit report 2026-04-03 published: true -date: 2026-04-03T01:36:30.489Z +date: 2026-04-03T01:46:30.038Z tags: gremlin,audit editor: markdown -dateCreated: 2026-04-03T01:36:30.489Z +dateCreated: 2026-04-03T01:46:30.038Z --- # Audit Report — authelia.yaml @@ -17,39 +17,32 @@ dateCreated: 2026-04-03T01:36:30.489Z --- -### SWARM AUDIT REPORT: +### Audit Results: -#### Homepage Labels -**PASS**: homepage.group=Management -**PASS**: homepage.name=Authelia -**PASS**: homepage.icon=authelia.png -**PASS**: homepage.href=https://login.wasted-bandwidth.net -**PASS**: homepage.description=SSO / Forward-Auth +1. **Homepage labels**: + - **PASS**: `homepage.group=Management` + - **PASS**: `homepage.name=Authelia` + - **PASS**: `homepage.icon=authelia.png` + - **PASS**: `homepage.href=https://login.wasted-bandwidth.net` + - **PASS**: `homepage.description=SSO / Forward-Auth` -#### Uptime Kuma Labels -**PASS**: kuma.authelia.http.name="Authelia" -**PASS**: kuma.authelia.http.url=http://authelia:9091 +2. **Uptime Kuma labels**: + - **PASS**: `kuma.authelia.http.name="Authelia"` + - **PASS**: `kuma.authelia.http.url=http://authelia:9091` -#### Caddy Labels on Exposed Services -**FAIL**: Missing `caddy=` and `caddy.reverse_proxy` labels. +3. **Caddy labels on exposed services**: + - **FAIL**: The service is exposing port 9091, but there's no Caddy label to reverse proxy it. + - **Fix**: Add a Caddy label to handle the reverse proxy for port 9091. -- **Issue**: The service is exposed but lacks necessary labels to enable automatic reverse proxying. -- **Fix**: Add the following labels to the `authelia` service: - ```yaml - labels: - caddy=login.wasted-bandwidth.net - caddy.reverse_proxy={{upstreams 9091}} - ``` +4. **Placement constraints**: + - **PASS**: `node.hostname == nas` -#### Placement Constraints -**PASS**: node.hostname == nas +5. **Volumes use /DockerVol/ path convention**: + - **PASS**: `/DockerVol/authelia/config:/config` + - **PASS**: `/DockerVol/authelia/secrets:/secrets` + - **PASS**: `/DockerVol/authelia/redis:/data` -#### Volumes Use /DockerVol/ Path Convention -**PASS**: /DockerVol/authelia/config -**PASS**: /DockerVol/authelia/secrets -**PASS**: /DockerVol/authelia/redis - -#### Network References External netgrimoire Overlay -**PASS**: references external netgrimoire overlay +6. **Network references external netgrimoire overlay**: + - **PASS**: `netgrimoire` network is defined as external. ### VERDICT: FAIL \ No newline at end of file