6830ada44a
* switched from flake-utils to flake-parts * dropped the overlay and instead populate configurable options for all required authentik components in the module * `nixosModule.default` is now a top-level output following the flake spec, instead of the previously incorrect system-specific definition
75 lines
2.3 KiB
Nix
75 lines
2.3 KiB
Nix
{ pkgs
|
|
, nixosModules
|
|
}:
|
|
let
|
|
# use a root-owned EnvironmentFile in production instead (systemd.services.<name>.serviceConfig.EnvironmentFile)
|
|
authentiksecret = "thissecretwillbeinthenixstore";
|
|
in
|
|
pkgs.nixosTest {
|
|
name = "authentik";
|
|
nodes = {
|
|
authentik = {
|
|
virtualisation = {
|
|
cores = 3;
|
|
memorySize = 2048;
|
|
};
|
|
imports = [
|
|
nixosModules.default
|
|
"${pkgs.path}/nixos/tests/common/user-account.nix"
|
|
"${pkgs.path}/nixos/tests/common/x11.nix"
|
|
];
|
|
|
|
services.authentik.enable = true;
|
|
|
|
systemd.services.authentik-migrate.serviceConfig.Environment = [
|
|
"AUTHENTIK_SECRET_KEY=${authentiksecret}"
|
|
];
|
|
systemd.services.authentik-worker.serviceConfig.Environment = [
|
|
"AUTHENTIK_SECRET_KEY=${authentiksecret}"
|
|
];
|
|
systemd.services.authentik.serviceConfig.Environment = [
|
|
"AUTHENTIK_SECRET_KEY=${authentiksecret}"
|
|
];
|
|
|
|
services.xserver.enable = true;
|
|
test-support.displayManager.auto.user = "alice";
|
|
environment.systemPackages = with pkgs; [
|
|
firefox
|
|
xdotool
|
|
];
|
|
};
|
|
};
|
|
|
|
enableOCR = true;
|
|
|
|
# TODO maybe use bootstrap env vars instead of testing manual workflow?
|
|
testScript = ''
|
|
start_all()
|
|
|
|
authentik.wait_for_unit("postgresql.service")
|
|
authentik.wait_for_unit("redis-authentik.service")
|
|
authentik.wait_for_unit("authentik-migrate.service")
|
|
authentik.wait_for_unit("authentik-worker.service")
|
|
authentik.wait_for_unit("authentik.service")
|
|
authentik.wait_for_open_port(9000)
|
|
authentik.wait_until_succeeds("curl -fL http://localhost:9000/if/flow/initial-setup >&2")
|
|
|
|
with subtest("Frontend renders"):
|
|
machine.succeed("su - alice -c 'firefox http://localhost:9000/if/flow/initial-setup' >&2 &")
|
|
machine.wait_for_text("Welcome to authentik")
|
|
machine.screenshot("initial-setup_1")
|
|
|
|
with subtest("admin account setup works"):
|
|
machine.send_key("tab")
|
|
machine.send_key("tab")
|
|
machine.send_chars("akadmin@localhost")
|
|
machine.send_key("tab")
|
|
machine.send_chars("foobar")
|
|
machine.send_key("tab")
|
|
machine.send_chars("foobar")
|
|
machine.send_key("ret")
|
|
machine.wait_for_text("My applications")
|
|
machine.send_key("esc")
|
|
machine.screenshot("initial-setup_2")
|
|
'';
|
|
}
|