RDP Web module

[bpmct]

A discussion dedicated to the RDP Web module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	10 / 20	0 / 20	7 / 10	45 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for AWS, Google Cloud, and custom Devolutions Gateway version configuration. Each example shows sensible defaults and the major configuration option (version override).
Coder-context framing	8	0	README does not explain what the module adds on top of Coder or how Coder fits in the RDP flow. It states what it does ("Enable Remote Desktop + a web based client") but lacks context about Coder's role in the architecture.
Visual preview	5	5	README includes an embedded video thumbnail image with a link to the video demonstration.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	The admin_password variable is marked sensitive = true in main.tf. However, README examples do not show any password configuration, and the default value "coderRDP!" is visible in the code. No README guidance on avoiding inline secrets, earning half credit.
Non-hardcoded auth path	4	2	The module uses basic username/password authentication with defaults. While these can be overridden via variables, there is no documented path to avoid pasting credentials (e.g., using Windows credential managers, external auth, or other mechanisms). Partial credit for variable-based override capability.

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	The module installs DevolutionsGateway from PSGallery. There is no module input variable to override the PSGallery source URL or redirect to an internal mirror. The devolutions_gateway_version variable only controls version selection, not the artifact source.
Bring-your-own binary	5	0	No documented way to skip the Devolutions Gateway installation when it is already present in the image. The installation script always runs Install-Module and Install-DGatewayPackage.
Egress transparency	3	0	No dedicated README section enumerating external endpoints. The module contacts PSGallery (powershellgallery.com) and potentially NuGet sources, but these are only inferable from the PowerShell script, not documented.
Runs without sudo	2	0	The PowerShell script performs system-wide module installation (Install-Module for all users), modifies HKLM registry keys, configures Windows services, and modifies files in C:\Program Files. These operations require administrator privileges on Windows. No documented non-admin path exists.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Variables include sensible defaults (display_name, slug, icon, admin credentials, version). The share variable includes validation. The devolutions_gateway_version has a helpful description explaining 'latest' vs specific versions.
Test coverage	4	1	TypeScript tests in main.test.ts cover basic functionality (script installation, username/password injection). However, no .tftest.hcl files exist for Terraform-level business logic testing. Tests are minimal and don't cover end-to-end RDP connectivity or web client behavior. Partial credit for having some test coverage.

Overall — 45 / 100

Raw 34 / 75 → round(34 / 75 × 100) = 45

Track: Utility (RDP server/client setup tool, not an IDE or AI agent)

---

Scored against SCORECARD.md on 2026-08-17 with claude-sonnet-4-5.