e211c94b94
ChangeLog: https://github.com/plausible/analytics/blob/v1.4.3/CHANGELOG.md#unreleased
Also makes the option `services.plausible.releaseCookiePath` mandatory[1]: since Elixir
1.13 the `RELEASE_COOKIE` env-var *must* be set, otherwise the startup
fails[2]. Since we drop `$out/releases/COOKIE` in the `fixupPhase` of
`mixRelease` and Elixir seems to always attempt to generate such a
file[3], I figured it's reasonable to just make it mandatory now.
Closes #155575
[1] https://nixos.org/manual/nixos/stable/options.html#opt-services.plausible.releaseCookiePath
[2] f24eb2c1ef
/
https://github.com/elixir-lang/elixir/issues/11114
[3] https://hexdocs.pm/mix/Mix.Tasks.Release.html, see `:cookie`
50 lines
1.5 KiB
Nix
50 lines
1.5 KiB
Nix
import ./make-test-python.nix ({ pkgs, lib, ... }: {
|
|
name = "plausible";
|
|
meta = with lib.maintainers; {
|
|
maintainers = [ ma27 ];
|
|
};
|
|
|
|
machine = { pkgs, ... }: {
|
|
virtualisation.memorySize = 4096;
|
|
services.plausible = {
|
|
enable = true;
|
|
releaseCookiePath = "${pkgs.runCommand "cookie" { } ''
|
|
${pkgs.openssl}/bin/openssl rand -base64 64 >"$out"
|
|
''}";
|
|
adminUser = {
|
|
email = "admin@example.org";
|
|
passwordFile = "${pkgs.writeText "pwd" "foobar"}";
|
|
activate = true;
|
|
};
|
|
server = {
|
|
baseUrl = "http://localhost:8000";
|
|
secretKeybaseFile = "${pkgs.writeText "dont-try-this-at-home" "nannannannannannannannannannannannannannannannannannannan_batman!"}";
|
|
};
|
|
};
|
|
};
|
|
|
|
testScript = ''
|
|
start_all()
|
|
machine.wait_for_unit("plausible.service")
|
|
machine.wait_for_open_port(8000)
|
|
|
|
machine.succeed("curl -f localhost:8000 >&2")
|
|
|
|
csrf_token = machine.succeed(
|
|
"curl -c /tmp/cookies localhost:8000/login | grep '_csrf_token' | sed -E 's,.*value=\"(.*)\".*,\\1,g'"
|
|
)
|
|
|
|
machine.succeed(
|
|
f"curl -b /tmp/cookies -f -X POST localhost:8000/login -F email=admin@example.org -F password=foobar -F _csrf_token={csrf_token.strip()} -D headers"
|
|
)
|
|
|
|
# By ensuring that the user is redirected to the dashboard after login, we
|
|
# also make sure that the automatic verification of the module works.
|
|
machine.succeed(
|
|
"[[ $(grep 'location: ' headers | cut -d: -f2- | xargs echo) == /sites* ]]"
|
|
)
|
|
|
|
machine.shutdown()
|
|
'';
|
|
})
|