Netgrimoire/Netgrimoire/Audits/vault-2026-04-27.md

title	description	published	date	tags	editor	dateCreated
Audit - vault.yaml	Gremlin audit report 2026-04-27	true	2026-04-27T11:38:30.820Z	gremlin,audit	markdown	2026-04-27T11:38:30.820Z

Audit Report — vault.yaml

Date: 2026-04-27
File: swarm/vault.yaml
Type: Docker Swarm
Verdict: PASS

---

Audit Results

1. Homepage labels:

   • homepage.group: PASS (Backup)
   • homepage.name: PASS (Vault)
   • homepage.icon: PASS (kopia.png)
   • homepage.href: PASS (https://vault.netgrimoire.com)
   • homepage.description: PASS (Snapshot backup and deduplication)

2. Uptime Kuma labels:

   • kuma.kopia.http.name: PASS (Kopia Web)
   • kuma.kopia.http.url: PASS (http://vault:51515)

3. Caddy labels on exposed services:

   • caddy=vault.netgrimoire.com: PASS
   • caddy.reverse_proxy=https://kopia-server-vault:51516: PASS

4. Placement constraints:

   • node.hostname == znas: PASS (Vault service will only run on the node with hostname 'znas')

5. Volumes use /DockerVol/ path convention:

   • /DockerVol/vault/config: PASS
   • /DockerVol/vault/cache: PASS
   • /DockerVol/vault/cert: PASS
   • /DockerVol/vault/logs: PASS

6. Network references external netgrimoire overlay:

   • netgrimoire: PASS (External network 'netgrimoire' is referenced correctly)

VERDICT: PASS