RDP Web module

[bpmct]

A discussion dedicated to the RDP Web module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Network Readiness	Engineering Quality	Overall
25 / 25	10 / 20	0 / 20	8 / 10	43 / 75

Drilldown

Presentation & Onboarding — 25 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for AWS, Google Cloud, and custom Devolutions Gateway version configuration. Each example shows sensible defaults and different configuration modes.
Coder-context framing	8	8	README clearly names both Coder and Devolutions Gateway ("RDP Server and Web Client, powered by Devolutions Gateway"). The module's purpose of enabling RDP on Windows workspaces through Coder is explicit.
Visual preview	5	5	README includes a video thumbnail with link to demonstration video showing the module in action.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	10	The admin_password variable is marked sensitive = true in main.tf. However, README examples do not demonstrate avoiding inline secrets—no examples show using data sources, external auth, or variable references for credentials. Partial credit for marking sensitivity but lacking documentation on secure credential handling patterns.
Non-hardcoded auth path	4	0	No documentation or examples showing paths to avoid pasting raw credentials. The module accepts username/password directly as variables with no mention of alternative authentication methods, ServiceAccounts, or external auth mechanisms.

Restricted-Network Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	The module installs from PSGallery (PowerShell Gallery) with no configurable mirror URL. The installation script hardcodes Install-Module -Name DevolutionsGateway from PSGallery with no option to point to an internal repository.
Bring-your-own binary	6	0	No option to disable installation when Devolutions Gateway is pre-installed. The coder_script resource always runs the installation logic with no conditional skip mechanism.
Egress transparency	4	0	No documentation of external endpoints contacted (PSGallery, NuGet package provider). No notes for restricted or air-gapped environments.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Variables have clear descriptions (e.g., devolutions_gateway_version explains 'latest' vs specific versions). Sensible defaults provided (admin_username = "Administrator", share = "owner"). The share variable includes validation with clear error message.
Test coverage	4	2	TypeScript tests in main.test.ts cover installation script generation and credential injection into the JS patch file. However, no .tftest.hcl file present for Terraform-native testing. Tests verify business logic but coverage is partial—no end-to-end RDP connectivity or Devolutions Gateway service validation.

Overall — 43 / 75

Raw 43 / 75 → round(43 / 75 × 100) = 57

---

Scored against SCORECARD.md on 2026-07-14 with claude-sonnet-4-5.