Netgrimoire/Netgrimoire/Audits/vault-2026-04-20.md

title	description	published	date	tags	editor	dateCreated
Audit - vault.yaml	Gremlin audit report 2026-04-20	true	2026-04-20T11:38:34.209Z	gremlin,audit	markdown	2026-04-20T11:38:34.209Z

Audit Report — vault.yaml

Date: 2026-04-20
File: swarm/vault.yaml
Type: Docker Swarm
Verdict: PASS

---

Audit Results:

1. Homepage labels:

   • PASS: homepage.group, homepage.name, homepage.icon, homepage.href, and homepage.description are correctly set.

2. Uptime Kuma labels:

   • FAIL: Uptime Kuma labels are missing. The configuration includes kuma.kopia.http.name and kuma.kopia.http.url, which are related to Kuma rather than Uptime Kuma.
   • Fix: Remove or correct the Kuma-specific labels if they were a mistake.

3. Caddy labels on exposed services:

   • PASS: The Caddy label caddy=vault.netgrimoire.com is correctly set, and it includes caddy.reverse_proxy.

4. Placement constraints:

   • FAIL: The placement constraint node.hostname == znas is not recommended for Docker Swarm as it limits the service to a single node. This could cause issues if that node fails.
   • Fix: Consider using more flexible constraints or removing the constraint altogether for better scalability.

5. Volumes use /DockerVol/ path convention:

   • PASS: All volumes follow the /DockerVol/vault/ path convention.

6. Network references external netgrimoire overlay:

   • PASS: The service references an external network netgrimoire.

VERDICT:

FAIL