audit(gremlin): vscode FAIL 2026-04-13

Netgrimoire/Audits/vscode-2026-04-13.md

@@ -0,0 +1,40 @@
+---
+title: Audit - vscode.yaml
+description: Gremlin audit report 2026-04-13
+published: true
+date: 2026-04-13T11:41:02.476Z
+tags: gremlin,audit
+editor: markdown
+dateCreated: 2026-04-13T11:41:02.476Z
+---
+
+# Audit Report — vscode.yaml
+
+**Date:** 2026-04-13  
+**File:** swarm/vscode.yaml  
+**Type:** Docker Swarm  
+**Verdict:** FAIL
+
+---
+
+### SWARM AUDIT REPORT
+
+#### 1. Homepage Labels
+- **PASS**: homepage.group, homepage.name, homepage.icon, homepage.href, homepage.description are all present and correctly formatted.
+
+#### 2. Uptime Kuma Labels
+- **PASS**: kuma.cs.http.name and kuma.cs.http.url are present and correctly formatted.
+
+#### 3. Caddy Labels on Exposed Services
+- **PASS**: caddy=code.netgrimoire.com, caddy.import=authentik, and caddy.reverse_proxy=code-server:8443 are all present and correctly formatted.
+
+#### 4. Placement Constraints
+- **FAIL**: The placement constraint `node.hostname == znas` is specific to the host, but it lacks a fallback or dynamic allocation strategy which could cause issues if the host is down. Suggestion: Consider using more flexible constraints like `node.role == manager`.
+
+#### 5. Volumes Use /DockerVol/<service> Path Convention
+- **PASS**: The volumes are correctly named and placed in `/DockerVol/code/config` and `/DockerVol/code/data`, adhering to the convention.
+
+#### 6. Network References External netgrimoire Overlay
+- **PASS**: The `netgrimoire` network is referenced as an external network, ensuring proper connectivity without recreating it.
+
+### VERDICT: FAIL