refactor: simplify test setup

Author: fricklerhandwerk

default.nix

@@ -156,8 +156,5 @@ rec {
       '';
     };
 
-  tests = import ./nix/tests/vm-basic.nix {
-    inherit pkgs;
-    wstModule = module;
-  };
+  tests = pkgs.callPackage ./nix/tests.nix { };
 }

nix/tests.nix

@@ -0,0 +1,56 @@
+{ lib, pkgs }:
+let
+  # TODO: specify project/service name globally
+  application = "web-security-tracker";
+  defaults = {
+    documentation.enable = lib.mkDefault false;
+
+    virtualisation = {
+      memorySize = 2048;
+      cores = 2;
+    };
+
+    services.${application} = {
+      enable = true;
+      production = false;
+      restart = "no"; # fail fast
+      domain = "example.org";
+      secrets = {
+        SECRET_KEY = pkgs.writeText "SECRET_KEY" "secret";
+        GH_CLIENT_ID = pkgs.writeText "gh_client" "bonjour";
+        GH_SECRET = pkgs.writeText "gh_secret" "secret";
+        GH_WEBHOOK_SECRET = pkgs.writeText "gh_secret" "webhook-secret";
+      };
+    };
+  };
+in
+lib.mapAttrs (name: test: pkgs.testers.runNixOSTest (test // { inherit name defaults; })) {
+  application-tests = {
+    nodes.server = _: { imports = [ ./configuration.nix ]; };
+    # run all application-level tests managed by Django
+    # https://docs.djangoproject.com/en/5.0/topics/testing/overview/
+    testScript = ''
+      server.wait_for_unit("${application}-server.service")
+      server.succeed("manage test shared")
+      server.succeed("manage test webview")
+    '';
+  };
+  css = {
+    nodes.server = _: { imports = [ ./web-security-tracker.nix ]; };
+    # check that the style sheet is served
+    testScript = ''
+      server.wait_for_unit("${application}-server.service")
+      server.wait_for_open_port(8000)
+      machine.succeed("curl --fail -H 'Host: example.org' http://127.0.0.1:80/static/style.css")
+    '';
+  };
+  admin = {
+    nodes.server = _: { imports = [ ./web-security-tracker.nix ]; };
+    # check that the admin interface is served
+    testScript = ''
+      server.wait_for_unit("${application}-server.service")
+      server.wait_for_open_port(8000)
+      server.succeed("curl --fail -L -H 'Host: example.org' http://localhost/admin")
+    '';
+  };
+}