Replace the 1301-line monolithic module.nix with focused modules: - modules/servarr.nix (Sonarr/Radarr/Prowlarr) - modules/bazarr.nix (Bazarr provider connections) - modules/jellyseerr.nix (Jellyseerr quality profiles) - modules/default.nix (import aggregator) Python scripts (from prior commit) are referenced as standalone files via PYTHONPATH, with config passed as a JSON file argument. New options: - Add bindAddress option to all services (default 127.0.0.1) - Replace hardcoded wg.service dependency with configurable networkNamespaceService option - Add systemd hardening: PrivateTmp, NoNewPrivileges, ProtectHome, ProtectKernelTunables/Modules, ProtectControlGroups, RestrictSUIDSGID, SystemCallArchitectures=native Test updates: - Extract mock qBittorrent/SABnzbd servers into tests/lib/mocks.nix - Fix duplicate wait_for_unit calls in integration test
153 lines
4.9 KiB
Nix
153 lines
4.9 KiB
Nix
{
|
|
pkgs,
|
|
lib,
|
|
self,
|
|
}:
|
|
|
|
pkgs.testers.runNixOSTest {
|
|
name = "arr-init-multiple-clients";
|
|
|
|
nodes.machine =
|
|
{ pkgs, lib, ... }:
|
|
let
|
|
mocks = import ./lib/mocks.nix { inherit pkgs; };
|
|
in
|
|
{
|
|
imports = [ self.nixosModules.default ];
|
|
|
|
system.stateVersion = "24.11";
|
|
|
|
virtualisation.memorySize = 4096;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
curl
|
|
jq
|
|
gnugrep
|
|
];
|
|
|
|
# Mock qBittorrent on port 6011
|
|
systemd.services.mock-qbittorrent = mocks.mkMockQbittorrent {
|
|
initialCategories = {
|
|
tv = { name = "tv"; savePath = "/downloads"; };
|
|
};
|
|
};
|
|
|
|
# Mock SABnzbd on port 6012
|
|
systemd.services.mock-sabnzbd = mocks.mkMockSabnzbd { };
|
|
|
|
systemd.tmpfiles.rules = [
|
|
"d /media/tv 0755 sonarr sonarr -"
|
|
];
|
|
|
|
services.sonarr = {
|
|
enable = true;
|
|
dataDir = "/var/lib/sonarr/.config/NzbDrone";
|
|
settings.server.port = lib.mkDefault 8989;
|
|
};
|
|
|
|
# Sonarr with TWO download clients: qBittorrent + SABnzbd
|
|
services.arrInit.sonarr = {
|
|
enable = true;
|
|
serviceName = "sonarr";
|
|
dataDir = "/var/lib/sonarr/.config/NzbDrone";
|
|
port = 8989;
|
|
downloadClients = [
|
|
{
|
|
name = "qBittorrent";
|
|
implementation = "QBittorrent";
|
|
configContract = "QBittorrentSettings";
|
|
protocol = "torrent";
|
|
fields = {
|
|
host = "127.0.0.1";
|
|
port = 6011;
|
|
useSsl = false;
|
|
tvCategory = "tv";
|
|
};
|
|
}
|
|
{
|
|
name = "SABnzbd";
|
|
implementation = "Sabnzbd";
|
|
configContract = "SabnzbdSettings";
|
|
protocol = "usenet";
|
|
fields = {
|
|
host = "127.0.0.1";
|
|
port = 6012;
|
|
useSsl = false;
|
|
apiKey = "test-api-key";
|
|
tvCategory = "tv";
|
|
};
|
|
}
|
|
];
|
|
rootFolders = [ "/media/tv" ];
|
|
};
|
|
};
|
|
|
|
testScript = ''
|
|
start_all()
|
|
|
|
# Wait for mock services
|
|
machine.wait_for_unit("mock-qbittorrent.service")
|
|
machine.wait_for_unit("mock-sabnzbd.service")
|
|
machine.wait_until_succeeds("curl -sf http://localhost:6011/api/v2/app/version", timeout=30)
|
|
|
|
# Wait for Sonarr
|
|
machine.wait_for_unit("sonarr.service")
|
|
machine.wait_until_succeeds(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/system/status -H \"X-Api-Key: $API_KEY\"",
|
|
timeout=120,
|
|
)
|
|
|
|
# Trigger init
|
|
machine.succeed("systemctl restart sonarr-init.service")
|
|
machine.wait_for_unit("sonarr-init.service")
|
|
|
|
# Verify both download clients exist
|
|
result = machine.succeed(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
|
|
"jq '. | length'"
|
|
).strip()
|
|
assert result == "2", f"Expected 2 Sonarr download clients, got {result}"
|
|
|
|
# Verify qBittorrent client
|
|
machine.succeed(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
|
|
"jq -e '.[] | select(.name == \"qBittorrent\")'"
|
|
)
|
|
|
|
# Verify SABnzbd client
|
|
machine.succeed(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
|
|
"jq -e '.[] | select(.name == \"SABnzbd\")'"
|
|
)
|
|
|
|
# Idempotency test: restart init and verify still exactly 2 clients
|
|
machine.succeed("systemctl restart sonarr-init.service")
|
|
machine.wait_for_unit("sonarr-init.service")
|
|
|
|
result = machine.succeed(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
|
|
"jq '. | length'"
|
|
).strip()
|
|
assert result == "2", f"Expected 2 Sonarr download clients after idempotency test, got {result}"
|
|
|
|
# Verify qBittorrent has correct configuration
|
|
machine.succeed(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
|
|
"jq -e '.[] | select(.name == \"qBittorrent\") | .protocol == \"torrent\"'"
|
|
)
|
|
|
|
# Verify SABnzbd has correct configuration
|
|
machine.succeed(
|
|
"API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
|
|
"curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
|
|
"jq -e '.[] | select(.name == \"SABnzbd\") | .protocol == \"usenet\"'"
|
|
)
|
|
'';
|
|
}
|