Netgrimoire/Netgrimoire/Audits/journiv-2026-05-04.md

title	description	published	date	tags	editor	dateCreated
Audit - journiv.yaml	Gremlin audit report 2026-05-04	true	2026-05-04T11:19:00.124Z	gremlin,audit	markdown	2026-05-04T11:19:00.124Z

Audit Report — journiv.yaml

Date: 2026-05-04
File: swarm/journiv.yaml
Type: Docker Compose
Verdict: FAIL

---

PASS Caddyfile configured for admin access on port 2019. FAIL No explicit entries in the Caddyfile for services exposing ports. Review swarm/journiv.yaml for any service definitions that expose ports and ensure they are correctly referenced in the Caddyfile. FAIL There are default passwords used in the configuration, especially for Crowdsec. Replace default passwords with secure ones immediately. FAIL Some services are running in privileged mode. Verify if these privileges are necessary and reduce them to the minimum required for security. PASS No obvious unnecessary forwarded headers in the Caddyfile. VERDICT: FAIL