nix-bitcoin/test/tests.nix

# Integration test, can be run without internet access.

# Make sure to update build() in ./run-tests.sh when adding new scenarios
{ scenario ? "default" }:

import ./make-test.nix rec {
  name = "nix-bitcoin-${scenario}";

  hardened = {
    imports = [ <nixpkgs/nixos/modules/profiles/hardened.nix> ];
    security.allowUserNamespaces = true; # re-enable disabled option
  };

  machine = { pkgs, lib, ... }: with lib; {
    imports = [
      ../modules/presets/secure-node.nix
      ../modules/secrets/generate-secrets.nix
      # using the hardened profile increases total test duration by ~50%, so disable it for now
      # hardened
    ];

    # needed because duplicity requires 270 MB of free temp space, regardless of backup size.
    virtualisation.diskSize = 1024;

    nix-bitcoin.netns-isolation.enable = (scenario == "netns");

    services.bitcoind.extraConfig = mkForce "connect=0";

    services.clightning.enable = true;
    services.spark-wallet.enable = true;
    services.lightning-charge.enable = true;
    services.nanopos.enable = true;

    services.lnd.enable = true;
    services.lnd.listenPort = 9736;
    services.lightning-loop.enable = true;

    services.electrs.enable = true;

    services.liquidd = {
      enable = true;
      listen = mkForce false;
      extraConfig = "noconnect=1";
    };

    services.nix-bitcoin-webindex.enable = true;

    services.hardware-wallets = {
      trezor = true;
      ledger = true;
    };

    services.backups.enable = true;

    services.btcpayserver.enable = true;
    services.btcpayserver.lightningBackend = "lnd";
    # needed to test macaroon creation
    environment.systemPackages = with pkgs; [ openssl xxd ];
    
    services.joinmarket.enable = true;
    services.joinmarket.yieldgenerator = {
      enable = true;
      customParameters = ''
        txfee = 200
        cjfee_a = 300
      '';
    };

    # to test that unused secrets are made inaccessible by 'setup-secrets'
    systemd.services.generate-secrets.postStart = ''
      install -o nobody -g nogroup -m777 <(:) /secrets/dummy
    '';
  };
  testScript =
    builtins.readFile ./tests.py + "\n\n" + builtins.readFile "${./.}/scenarios/${scenario}.py";
}