nixosTests.acme-dns: init

import ./make-test-python.nix ({ ... }: {

  name = "acme-dns";

  nodes.machine = { pkgs, ... }: {

    services.acme-dns = {

      enable = true;

      settings = {

        general = rec {

          domain = "acme-dns.home.arpa";

          nsname = domain;

          nsadmin = "admin.home.arpa";

          records = [

            "${domain}. A 127.0.0.1"

            "${domain}. AAAA ::1"

            "${domain}. NS ${domain}."

          ];

        };

        logconfig.loglevel = "debug";

      };

    };

    environment.systemPackages = with pkgs; [ curl bind ];

  };

  testScript = ''

    import json

    machine.wait_for_unit("acme-dns.service")

    machine.wait_for_open_port(53) # dns

    machine.wait_for_open_port(8080) # http api

    result = machine.succeed("curl --fail -X POST http://localhost:8080/register")

    print(result)

    registration = json.loads(result)

    machine.succeed(f'dig -t TXT @localhost {registration["fulldomain"]} | grep "SOA" | grep "admin.home.arpa"')

    # acme-dns exspects a TXT value string length of exactly 43 chars

    txt = "___dummy_validation_token_for_txt_record___"

    machine.succeed(

      "curl --fail -X POST http://localhost:8080/update "

      + f' -H "X-Api-User: {registration["username"]}"'

      + f' -H "X-Api-Key: {registration["password"]}"'

      + f' -d \'{{"subdomain":"{registration["subdomain"]}", "txt":"{txt}"}}\'''

    )

    assert txt in machine.succeed(f'dig -t TXT +short @localhost {registration["fulldomain"]}')

  '';

})

  _3proxy = runTest ./3proxy.nix;

  aaaaxy = runTest ./aaaaxy.nix;

  acme = runTest ./acme.nix;

  acme-dns = handleTest ./acme-dns.nix {};

  adguardhome = runTest ./adguardhome.nix;

  aesmd = runTestOn ["x86_64-linux"] ./aesmd.nix;

  agate = runTest ./web-servers/agate.nix;

{ lib

, buildGoModule

, fetchFromGitHub

, nixosTests

}:

buildGoModule rec {

    substituteInPlace $out/lib/systemd/system/acme-dns.service --replace "/usr/local/bin/acme-dns" "$out/bin/acme-dns"

  '';

  passthru.tests = { inherit (nixosTests) acme-dns; };

  meta = {

    description = "Limited DNS server to handle ACME DNS challenges easily and securely";

    homepage = "https://github.com/joohoi/acme-dns";