nixpkgs/nixos/tests/botamusique.nix

{
  pkgs,
  lib,
  ...
}:

{
  name = "botamusique";
  meta.maintainers = with lib.maintainers; [ hexa ];

  nodes = {
    machine =
      { config, ... }:
      {
        networking.extraHosts = ''
          127.0.0.1 all.api.radio-browser.info
        '';

        services.murmur = {
          enable = true;
          registerName = "NixOS tests";
        };

        services.botamusique = {
          enable = true;
          settings = {
            server = {
              channel = "NixOS tests";
            };
            bot = {
              version = false;
              auto_check_update = false;
            };
          };
        };
      };
  };

  testScript = ''
    start_all()

    machine.wait_for_unit("murmur.service")
    machine.wait_for_unit("botamusique.service")

    machine.sleep(10)

    machine.wait_until_succeeds(
        "journalctl -u murmur.service -e | grep -q '<1:botamusique(-1)> Authenticated'"
    )

    with subtest("Check systemd hardening"):
        output = machine.execute("systemctl show botamusique.service")[1]
        machine.log(output)
        output = machine.execute("systemd-analyze security botamusique.service")[1]
        machine.log(output)
  '';
}