···
# Test Traefik as a reverse proxy of a local web service
# and a Docker container.
-
import ./make-test-python.nix (
-
meta = with pkgs.lib.maintainers; {
-
maintainers = [ joko ];
-
environment.systemPackages = [ pkgs.curl ];
-
virtualisation.oci-containers = {
-
"traefik.http.routers.nginx.entrypoints=web"
-
"traefik.http.routers.nginx.rule=Host(`nginx.traefik.test`)"
-
image = "nginx-container";
-
imageStream = pkgs.dockerTools.examples.nginxStream;
-
networking.firewall.allowedTCPPorts = [ 80 ];
-
dynamicConfigOptions = {
-
http.routers.simplehttp = {
-
rule = "Host(`simplehttp.traefik.test`)";
-
entryPoints = [ "web" ];
-
service = "simplehttp";
-
http.services.simplehttp = {
-
loadBalancer.servers = [
-
url = "http://127.0.0.1:8000";
-
staticConfigOptions = {
-
checkNewVersion = false;
-
sendAnonymousUsage = false;
-
entryPoints.web.address = ":\${HTTP_PORT}";
-
providers.docker.exposedByDefault = false;
-
(pkgs.writeText "traefik.env" ''
-
systemd.services.simplehttp = {
-
script = "${pkgs.python3}/bin/python -m http.server 8000";
-
serviceConfig.Type = "simple";
-
wantedBy = [ "multi-user.target" ];
-
users.users.traefik.extraGroups = [ "docker" ];
-
traefik.wait_for_unit("docker-nginx.service")
-
traefik.wait_until_succeeds("docker ps | grep nginx-container")
-
traefik.wait_for_unit("simplehttp.service")
-
traefik.wait_for_unit("traefik.service")
-
traefik.wait_for_open_port(80)
-
traefik.wait_for_unit("multi-user.target")
-
client.wait_for_unit("multi-user.target")
-
client.wait_until_succeeds("curl -sSf -H Host:nginx.traefik.test http://traefik/")
-
with subtest("Check that a container can be reached via Traefik"):
-
assert "Hello from NGINX" in client.succeed(
-
"curl -sSf -H Host:nginx.traefik.test http://traefik/"
-
with subtest("Check that dynamic configuration works"):
-
assert "Directory listing for " in client.succeed(
-
"curl -sSf -H Host:simplehttp.traefik.test http://traefik/"