nixpkgs/nixos/tests/acme-dns.nix

import ./make-test-python.nix (
  { ... }:
  {
    name = "acme-dns";

    nodes.machine =
      { pkgs, ... }:
      {
        services.acme-dns = {
          enable = true;
          settings = {
            general = rec {
              domain = "acme-dns.home.arpa";
              nsname = domain;
              nsadmin = "admin.home.arpa";
              records = [
                "${domain}. A 127.0.0.1"
                "${domain}. AAAA ::1"
                "${domain}. NS ${domain}."
              ];
            };
            logconfig.loglevel = "debug";
          };
        };
        environment.systemPackages = with pkgs; [
          curl
          bind
        ];
      };

    testScript = ''
      import json

      machine.wait_for_unit("acme-dns.service")
      machine.wait_for_open_port(53) # dns
      machine.wait_for_open_port(8080) # http api

      result = machine.succeed("curl --fail -X POST http://localhost:8080/register")
      print(result)

      registration = json.loads(result)

      machine.succeed(f'dig -t TXT @localhost {registration["fulldomain"]} | grep "SOA" | grep "admin.home.arpa"')

      # acme-dns exspects a TXT value string length of exactly 43 chars
      txt = "___dummy_validation_token_for_txt_record___"

      machine.succeed(
        "curl --fail -X POST http://localhost:8080/update "
        + f' -H "X-Api-User: {registration["username"]}"'
        + f' -H "X-Api-Key: {registration["password"]}"'
        + f' -d \'{{"subdomain":"{registration["subdomain"]}", "txt":"{txt}"}}\'''
      )

      assert txt in machine.succeed(f'dig -t TXT +short @localhost {registration["fulldomain"]}')
    '';
  }
)