Netgrimoire/Netgrimoire/Audits/caddy-2026-04-20.md

title	description	published	date	tags	editor	dateCreated
Audit - caddy.yaml	Gremlin audit report 2026-04-20	true	2026-04-20T11:48:12.843Z	gremlin,audit	markdown	2026-04-20T11:48:12.843Z

Audit Report — caddy.yaml

Date: 2026-04-20
File: swarm/stack/caddy/caddy.yaml
Type: Docker Swarm
Verdict: FAIL

---

SWARM AUDIT REPORT

1. Homepage labels: homepage.group, homepage.name, homepage.icon, homepage.href, homepage.description

FAIL: No homepage labels are present in the configuration.

2. Uptime Kuma labels: kuma..http.name, kuma..http.url

FAIL: No Uptime Kuma labels or references are found.

3. Caddy labels on exposed services:

• PASS: Found caddy=<domain> and caddy.reverse_proxy labels on the caddy service.
• FAIL: No other services have Caddy-related labels.

4. Placement constraints: node.hostname

PASS: Both services (caddy and crowdsec) are correctly constrained to run on a node with the hostname znas.

5. Volumes use /DockerVol/ path convention:

• FAIL: The volume paths do not follow the /DockerVol/<service> convention.
  • Fix: Update volume paths to use the convention, e.g., /DockerVol/caddy/data instead of /export/Docker/caddy:/data.

6. Network references external netgrimoire overlay

PASS: Both netgrimoire and crowdsec_net networks are correctly referenced as external.

VERDICT: FAIL