1.7 KiB
1.7 KiB
| title | description | published | date | tags | editor | dateCreated |
|---|---|---|---|---|---|---|
| Audit - caddy-1.yaml | Gremlin audit report 2026-04-20 | true | 2026-04-20T11:47:22.141Z | gremlin,audit | markdown | 2026-04-20T11:47:22.141Z |
Audit Report — caddy-1.yaml
Date: 2026-04-20
File: swarm/stack/caddy/caddy-1.yaml
Type: Docker Swarm
Verdict: FAIL
SWARM AUDIT - Caddy-1.yaml
-
Homepage labels: Homepage labels are missing from the file.
- Fix: Add homepage.labels with required keys.
-
Uptime Kuma labels: Uptime Kuma labels are not present in the file.
- Fix: If you intend to use Uptime Kuma, add corresponding labels as specified.
-
Caddy labels on exposed services:
- The service has
caddylabel set with a value ofdomain, which should be replaced with an actual domain name. - There is no
caddy.reverse_proxylabel specified. - Fix: Replace
caddy=<domain>with the actual domain name and addcaddy.reverse_proxy: "http://example.com"if applicable.
- The service has
-
Placement constraints:
- The service has a placement constraint for node.hostname == znas, which is specific to your infrastructure.
- Pass: Ensure that
znasis a valid node hostname in your Swarm setup.
-
Volumes use /DockerVol/ path convention:
- Volumes are mounted at
/export/Docker/caddyand other paths, not following the/DockerVol/<service>convention. - Fix: Update volume mounts to follow the
/DockerVol/<service>convention.
- Volumes are mounted at
-
Network references external netgrimoire overlay:
- The service correctly references the
netgrimoireandvpnnetworks, which are marked as external. - Pass: Ensure that these networks are properly set up in your Swarm environment.
- The service correctly references the
VERDICT: FAIL