blob: 5e96774c2730d9021df2f9268cb1ba04b7cba42a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
{ lib, pkgs, ... }:
{
name = "part-db";
meta.maintainers = with lib.maintainers; [ oddlama ];
nodes = {
machine = {
services.part-db = {
enable = true;
environmentFile = pkgs.writeText "part-db.env" ''
APP_SECRET=0123456789abcdef0123456789abcdef
'';
};
};
};
testScript = ''
start_all()
machine.wait_for_unit("postgresql.service")
machine.wait_for_unit("part-db-migrate.service")
machine.wait_for_unit("phpfpm-part-db.service")
machine.wait_for_unit("nginx.service")
machine.succeed("test -d /var/lib/part-db/public/media")
machine.succeed("test -d /var/lib/part-db/uploads")
machine.succeed("test -d /var/lib/part-db/share")
machine.succeed("test $(readlink ${pkgs.part-db}/public/media) = /var/lib/part-db/public/media/")
machine.succeed("test $(readlink ${pkgs.part-db}/uploads) = /var/lib/part-db/uploads/")
machine.succeed("grep APP_SECRET=0123456789abcdef0123456789abcdef /var/lib/part-db/env.local")
machine.succeed("test $(stat -c %a:%U:%G /var/lib/part-db/env.local) = 600:part-db:part-db")
machine.wait_for_open_port(80)
machine.succeed("curl -L --fail http://localhost | grep 'Part-DB'", timeout=10)
machine.succeed("echo static > /var/lib/part-db/public/media/static.txt")
machine.succeed("curl -I --fail http://localhost/media/static.txt | grep 'Content-Security-Policy'")
machine.succeed("curl -I --fail http://localhost/media/static.txt | grep 'X-Content-Type-Options: nosniff'")
machine.succeed("echo '<?php echo 1; ?>' > /var/lib/part-db/public/media/shell.phar")
machine.succeed("curl -I http://localhost/media/shell.phar | grep 'HTTP/1.1 403 Forbidden'")
'';
}
|
