push sheeet

nixos/tests/pihole-ftl/basic.nix

@@ -0,0 +1,47 @@
+# A basic test with no webserver, no API, just checking DNS functionality
+{
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  name = "pihole-ftl-basic";
+  meta.maintainers = with lib.maintainers; [ averyvigolo ];
+
+  nodes.machine =
+    { pkgs, lib, ... }:
+    {
+      services.pihole-ftl = {
+        enable = true;
+        openFirewallDNS = true;
+      };
+      environment.systemPackages = with pkgs; [ dig ];
+    };
+
+  nodes.client =
+    { pkgs, lib, ... }:
+    {
+      environment.systemPackages = with pkgs; [ dig ];
+    };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      machine.wait_for_unit("pihole-ftl.service")
+      machine.wait_for_open_port(53)
+      client.wait_for_unit("network.target")
+
+      with subtest("the pi-hole machine resolves properly"):
+        ret, out = machine.execute("dig @localhost +short pi.hole")
+        assert ret == 0, "pi.hole should resolve on the local machine"
+        assert out.rstrip() == "127.0.0.1", "pi.hole should resolve to localhost on the local machine"
+
+      machine_address = "${(builtins.head nodes.machine.networking.interfaces.eth1.ipv4.addresses).address}"
+
+      with subtest("a client machine resolves properly"):
+        ret, out = client.execute(f"dig @{machine_address} +short pi.hole")
+        assert ret == 0, "pi.hole should resolve on a client machine"
+        assert out.rstrip() == machine_address, "pi.hole should resolve to the machine's address"
+    '';
+}