kiara/Fediversity
1
0
Fork 0
forked from fediversity/fediversity
Code Pull requests Activity

remove unused acme node for data model tests

Browse source 
Signed-off-by: Kiara Grouwstra <kiara@procolix.eu>
This commit is contained in:
Kiara Grouwstra 2025-10-10 22:30:54 +02:00
parent 82d6059158
commit 5419e582d7
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU
7 changed files with 36 additions and 39 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

69
deployment/check/common/nixosTest.nix
View file

@ -80,41 +80,44 @@ in
acmeNodeIP = config.nodes.acme.networking.primaryIPAddress;
nodes =
nodes = lib.mkMerge [
{
deployer = {
imports = [ ./deployerNode.nix ];
_module.args = { inherit inputs sources; };
enableAcme = config.enableAcme;
acmeNodeIP = config.nodes.acme.networking.primaryIPAddress;
};
deployer = lib.mkMerge [
{
imports = [ ./deployerNode.nix ];
_module.args = { inherit inputs sources; };
enableAcme = config.enableAcme;
}
(lib.mkIf config.enableAcme {
acmeNodeIP = config.nodes.acme.networking.primaryIPAddress;
security.acme = {
acceptTerms = true;
defaults.email = "test@test.com";
defaults.server = "https://acme.test/dir";
};
security.pki.certificateFiles = [
(import "${inputs.nixpkgs}/nixos/tests/common/acme/server/snakeoil-certs.nix").ca.cert
];
networking.extraHosts = "${config.acmeNodeIP} acme.test";
})
];
}
//
(
if config.enableAcme then
{
acme = {
## FIXME: This makes `nodes.acme` into a local resolver. Maybe this will
## break things once we play with DNS?
imports = [ "${inputs.nixpkgs}/nixos/tests/common/acme/server" ];
## We aren't testing ACME - we just want certificates.
systemd.services.pebble.environment.PEBBLE_VA_ALWAYS_VALID = "1";
};
}
else
{ }
)
//
genAttrs config.targetMachines (_: {
imports = [ ./targetNode.nix ];
_module.args = { inherit inputs sources; };
enableAcme = config.enableAcme;
acmeNodeIP = if config.enableAcme then config.nodes.acme.networking.primaryIPAddress else null;
});
(lib.mkIf config.enableAcme {
acme = {
## FIXME: This makes `nodes.acme` into a local resolver. Maybe this will
## break things once we play with DNS?
imports = [ "${inputs.nixpkgs}/nixos/tests/common/acme/server" ];
## We aren't testing ACME - we just want certificates.
systemd.services.pebble.environment.PEBBLE_VA_ALWAYS_VALID = "1";
};
})
(genAttrs config.targetMachines (_: {
imports = [ ./targetNode.nix ];
_module.args = { inherit inputs sources; };
enableAcme = config.enableAcme;
acmeNodeIP = if config.enableAcme then config.nodes.acme.networking.primaryIPAddress else null;
}))
];
testScript = ''
${forConcat (attrNames config.nodes) (n: ''

1
deployment/check/data-model-nixops4/constants.nix
View file

@ -4,6 +4,5 @@
];
pathToRoot = ../../..;
pathFromRoot = ./.;
enableAcme = true;
useFlake = true;
}

1
deployment/check/data-model-nixops4/default.nix
View file

@ -16,7 +16,6 @@ runNixOSTest {
targetMachines
pathToRoot
pathFromRoot
enableAcme
useFlake
;
}

1
deployment/check/data-model-ssh/constants.nix
View file

@ -8,5 +8,4 @@
name = "root";
};
pathFromRoot = "/deployment/check/data-model-ssh";
enableAcme = true;
}

1
deployment/check/data-model-ssh/default.nix
View file

@ -16,6 +16,5 @@ runNixOSTest {
targetMachines
pathToRoot
pathFromRoot
enableAcme
;
}

1
deployment/check/data-model-tf/constants.nix
View file

@ -7,5 +7,4 @@
name = "root";
};
pathFromRoot = "/deployment/check/data-model-tf";
enableAcme = true;
}

1
deployment/check/data-model-tf/default.nix
View file

@ -46,6 +46,5 @@ pkgs.testers.runNixOSTest {
targetMachines
pathToRoot
pathFromRoot
enableAcme
;
}