nixos/tests/nginx-auth.nix

   1 import ./make-test-python.nix ({ pkgs, ... }: {
   2   name = "nginx-auth";
   3
   4   nodes = {
   5     webserver = { pkgs, lib, ... }: {
   6       services.nginx = let
   7         root = pkgs.runCommand "testdir" {} ''
   8           mkdir "$out"
   9           echo hello world > "$out/index.html"
  10         '';
  11       in {
  12         enable = true;
  13
  14         virtualHosts.lockedroot = {
  15           inherit root;
  16           basicAuth.alice = "pwofa";
  17         };
  18
  19         virtualHosts.lockedsubdir = {
  20           inherit root;
  21           locations."/sublocation/" = {
  22             alias = "${root}/";
  23             basicAuth.bob = "pwofb";
  24           };
  25         };
  26       };
  27     };
  28   };
  29
  30   testScript = ''
  31     webserver.wait_for_unit("nginx")
  32     webserver.wait_for_open_port(80)
  33
  34     webserver.fail("curl --fail --resolve lockedroot:80:127.0.0.1 http://lockedroot")
  35     webserver.succeed(
  36         "curl --fail --resolve lockedroot:80:127.0.0.1 http://alice:pwofa@lockedroot"
  37     )
  38
  39     webserver.succeed("curl --fail --resolve lockedsubdir:80:127.0.0.1 http://lockedsubdir")
  40     webserver.fail(
  41         "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://lockedsubdir/sublocation/index.html"
  42     )
  43     webserver.succeed(
  44         "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://bob:pwofb@lockedsubdir/sublocation/index.html"
  45     )
  46   '';
  47 })