71 lines
2.6 KiB
Nix
71 lines
2.6 KiB
Nix
{ system ? builtins.currentSystem,
|
|
config ? {},
|
|
pkgs ? import ../../.. { inherit system config; }
|
|
}:
|
|
|
|
let
|
|
inherit (import ../../lib/testing-python.nix { inherit system pkgs; }) makeTest;
|
|
f = backend: makeTest {
|
|
name = "ihatemoney-${backend}";
|
|
nodes.machine = { nodes, lib, ... }: {
|
|
services.ihatemoney = {
|
|
enable = true;
|
|
enablePublicProjectCreation = true;
|
|
secureCookie = false;
|
|
inherit backend;
|
|
uwsgiConfig = {
|
|
http = ":8000";
|
|
};
|
|
};
|
|
boot.cleanTmpDir = true;
|
|
# for exchange rates
|
|
security.pki.certificateFiles = [ ./server.crt ];
|
|
networking.extraHosts = "127.0.0.1 api.exchangerate.host";
|
|
services.nginx = {
|
|
enable = true;
|
|
virtualHosts."api.exchangerate.host" = {
|
|
addSSL = true;
|
|
# openssl req -x509 -newkey rsa:4096 -keyout server.key -out server.crt -days 1000000 -nodes -subj '/CN=api.exchangerate.host'
|
|
sslCertificate = ./server.crt;
|
|
sslCertificateKey = ./server.key;
|
|
locations."/".return = "200 '${builtins.readFile ./rates.json}'";
|
|
};
|
|
};
|
|
# ihatemoney needs a local smtp server otherwise project creation just crashes
|
|
services.postfix.enable = true;
|
|
};
|
|
testScript = ''
|
|
machine.wait_for_open_port(8000)
|
|
machine.wait_for_unit("uwsgi.service")
|
|
machine.wait_until_succeeds("curl --fail https://api.exchangerate.host")
|
|
machine.wait_until_succeeds("curl --fail http://localhost:8000")
|
|
|
|
result = machine.succeed(
|
|
"curl --fail -X POST http://localhost:8000/api/projects -d 'name=yay&id=yay&password=yay&contact_email=yay@example.com&default_currency=XXX'"
|
|
)
|
|
assert '"yay"' in result, repr(result)
|
|
owner, timestamp = machine.succeed(
|
|
"stat --printf %U:%G___%Y /var/lib/ihatemoney/secret_key"
|
|
).split("___")
|
|
assert "ihatemoney:ihatemoney" == owner
|
|
|
|
with subtest("Restart machine and service"):
|
|
machine.shutdown()
|
|
machine.start()
|
|
machine.wait_for_open_port(8000)
|
|
machine.wait_for_unit("uwsgi.service")
|
|
|
|
with subtest("check that the database is really persistent"):
|
|
machine.succeed("curl --fail --basic -u yay:yay http://localhost:8000/api/projects/yay")
|
|
|
|
with subtest("check that the secret key is really persistent"):
|
|
timestamp2 = machine.succeed("stat --printf %Y /var/lib/ihatemoney/secret_key")
|
|
assert timestamp == timestamp2
|
|
|
|
assert "ihatemoney" in machine.succeed("curl --fail http://localhost:8000")
|
|
'';
|
|
};
|
|
in {
|
|
ihatemoney-sqlite = f "sqlite";
|
|
ihatemoney-postgresql = f "postgresql";
|
|
}
|