RStudio Server module

[bpmct]

A discussion dedicated to the RStudio Server module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	19 / 25	10 / 20	0 / 20	7 / 10	53 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	README shows only one basic example with minimal configuration. No examples demonstrating different modes (auth enabled vs disabled, different project paths, renv configurations).
Coder-context framing	8	6	Mentions Coder workspace and shows basic integration, but lacks detail on how RStudio Server fits into the Coder workflow or what value Coder adds beyond hosting.
Visual preview	5	5	README includes an embedded image: 

IDE Integration — 19 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource properly configured with subdomain support, share controls, order, and group parameters.
Managed configuration	6	6	Supports managed configuration through disable_auth, rstudio_user, rstudio_password, enable_renv, and renv.lock-based environment restoration.
Configurable folder or workdir	6	6	project_path variable documented and implemented, mounts specified path to /home/${RSTUDIO_USER}/project in container.
Pre-installed extensions	6	0	Not applicable for RStudio Server; no extension mechanism documented.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	rstudio_user and rstudio_password variables are marked sensitive = true, but README example shows no credential handling at all (no examples with these variables). Defaults are hardcoded as "rstudio"/"rstudio" in the module itself.
Non-hardcoded auth path	4	2	disable_auth option exists and defaults to true, which avoids credentials entirely, but no documentation of alternative auth mechanisms or integration with external auth systems.

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	Docker image is hardcoded as rocker/rstudio:${SERVER_VERSION} in run.sh. No variable to override the image registry or repository. rstudio_server_version only controls the tag, not the source.
Bring-your-own binary	5	0	No documented way to skip the docker pull or use a pre-existing container/image. Script always executes docker pull.
Egress transparency	3	0	No dedicated README section documenting external endpoints. The docker pull from Docker Hub is visible only in source code (run.sh).
Runs without sudo	2	0	Script uses docker commands which typically require either sudo or docker group membership. No documentation of non-sudo path. The script itself doesn't invoke sudo directly, but docker operations generally require elevated privileges.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Variables have clear descriptions and sensible defaults. share variable includes validation. Most inputs are well-typed with appropriate defaults.
Test coverage	4	1	No .tftest.hcl files or TypeScript tests visible in the provided module files. No testing story documented.

Overall — 53 / 100

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.