Add nixos VM integration test

Author: jhh

flake.nix

@@ -62,7 +62,10 @@
             pillowHeifOverrides = import ./lib/overrides-pillow-heif.nix { inherit pkgs; };
             psycopgOverrides = import ./lib/overrides-psycopg.nix { inherit pkgs; };
             opencvOverrides = import ./lib/overrides-opencv.nix { inherit pkgs; };
-            strykeforceOverrides = import ./lib/overrides-strykeforce.nix { inherit pkgs workspace; };
+            strykeforceOverrides = import ./lib/overrides-strykeforce.nix {
+              inherit lib pkgs workspace;
+              nixosModule = self.nixosModules.default;
+            };
             tbaApiOverrides = import ./lib/overrides-tba-api-v3client.nix { inherit pkgs; };
           in
           baseSet.overrideScope (

lib/overrides-strykeforce.nix

@@ -1,6 +1,6 @@
 {
-  # lib,
-  # nixosModule,
+  lib,
+  nixosModule,
   pkgs,
   workspace,
 }:
@@ -33,6 +33,57 @@ final: prev: {
               runHook postBuild
             '';
           };
+        }
+        // lib.optionalAttrs isLinux {
+          nixos =
+          let
+            secrets = pkgs.writeText "strykeforce-test-secrets" ''
+              SECRET_KEY="not-a-secret"
+              TBA_READ_KEY=
+              SENTRY_DSN=
+              EMAIL_HOST_USER=
+              EMAIL_HOST_PASSWORD=
+            '';
+          in
+          pkgs.nixosTest {
+            name = "strykeforce-nixos-test";
+
+            nodes.machine =
+              { ... }:
+              {
+                imports = [
+                  nixosModule
+                ];
+
+                strykeforce.services.website = {
+                  enable = true;
+                  ssl = false;
+                  secrets = [ secrets ];
+                };
+
+                services.postgresql = {
+                  enable = true;
+                  package = pkgs.postgresql_16;
+                  ensureDatabases = [ "strykeforce" ];
+                  ensureUsers = [
+                    {
+                      name = "strykeforce";
+                      ensureDBOwnership = true;
+                    }
+                  ];
+                };
+
+                system.stateVersion = "24.11";
+              };
+
+            testScript =
+              { nodes, ... }:
+              ''
+                # wait for service
+                machine.wait_for_unit("strykeforce-website.service")
+                machine.wait_until_succeeds("curl -sLf http://localhost:8000/static/2767/main.css")
+              '';
+          };
         };
     };
   });