import ./make-test-python.nix (
  { pkgs, lib, ... }:
  {
    name = "gns3-server";
    meta.maintainers = [ lib.maintainers.anthonyroussel ];

    nodes.machine =
      { ... }:
      let
        tls-cert = pkgs.runCommand "selfSignedCerts" { buildInputs = [ pkgs.openssl ]; } ''
          openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -nodes -days 365 \
            -subj '/CN=localhost'
          install -D -t $out key.pem cert.pem
        '';
      in
      {
        services.gns3-server = {
          enable = true;
          auth = {
            enable = true;
            user = "user";
            passwordFile = pkgs.writeText "gns3-auth-password-file" "password";
          };
          ssl = {
            enable = true;
            certFile = "${tls-cert}/cert.pem";
            keyFile = "${tls-cert}/key.pem";
          };
          dynamips.enable = true;
          ubridge.enable = true;
          vpcs.enable = true;
        };

        security.pki.certificateFiles = [ "${tls-cert}/cert.pem" ];
      };

    testScript =
      let
        createProject = pkgs.writeText "createProject.json" (
          builtins.toJSON {
            name = "test_project";
          }
        );
      in
      ''
        start_all()

        machine.wait_for_unit("gns3-server.service")
        machine.wait_for_open_port(3080)

        with subtest("server is listening"):
          machine.succeed("curl -sSfL -u user:password https://localhost:3080/v2/version")

        with subtest("create dummy project"):
          machine.succeed("curl -sSfL -u user:password https://localhost:3080/v2/projects -d @${createProject}")

        with subtest("logging works"):
          log_path = "/var/log/gns3/server.log"
          machine.wait_for_file(log_path)
      '';
  }
)