From 82d1dc4549f3ba079505b6ebaa266e6d04d1cce4 Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Fri, 2 Oct 2026 00:27:50 +0200
Subject: tests/email/*: Rename to stalwart email tests

These tests explicitly test our stalwart email module.
---
 tests/by-name/st/stalwart-email-ip/test.nix | 177 ++++++++++++++++++++++++++++
 1 file changed, 177 insertions(+)
 create mode 100644 tests/by-name/st/stalwart-email-ip/test.nix

(limited to 'tests/by-name/st/stalwart-email-ip')

diff --git a/tests/by-name/st/stalwart-email-ip/test.nix b/tests/by-name/st/stalwart-email-ip/test.nix
new file mode 100644
index 0000000..c0b2d7e
--- /dev/null
+++ b/tests/by-name/st/stalwart-email-ip/test.nix
@@ -0,0 +1,177 @@
+{
+  nixos-lib,
+  pkgsUnstable,
+  nixpkgs-unstable,
+  vhackPackages,
+  pkgs,
+  extraModules,
+  nixLib,
+  ...
+}: let
+  domain = "mail.server.test";
+
+  scripts = {
+    checkEmailEmpty = pkgs.writeShellScript "assert-empty-emails" ''
+      set -xe
+
+      # fetchmail returns EXIT_CODE 1 when no new mail
+      fetchmail --nosslcertck --verbose >&2 || [ "$?" -eq 1 ] || {
+        echo "Expected exit code 1." >&2
+        exit 1
+      }
+    '';
+  };
+
+  mkUser = user: {nodes, ...}: let
+    domainIp = nodes.server.networking.primaryIPAddress;
+  in {
+    environment.systemPackages = with pkgs; [
+      fetchmail
+      msmtp
+      procmail
+    ];
+
+    users.users."${user}" = {isNormalUser = true;};
+
+    systemd.tmpfiles.rules = [
+      "d /home/${user}/mail         0700 ${user} users - -"
+      "L /home/${user}/.fetchmailrc -    -       -     - /etc/homeSetup/.fetchmailrc"
+      "L /home/${user}/.procmailrc  -    -       -     - /etc/homeSetup/.procmailrc"
+      "L /home/${user}/.msmtprc     -    -       -     - /etc/homeSetup/.msmtprc"
+    ];
+
+    environment.etc = {
+      "homeSetup/.fetchmailrc" = {
+        text = ''
+          poll "${domainIp}" protocol IMAP
+            username "${user}"
+            password "${user}-password"
+            ssl
+            mda procmail;
+        '';
+        mode = "0600";
+        inherit user;
+      };
+      "homeSetup/.procmailrc" = {
+        text = ''
+          DEFAULT=$HOME/mail
+        '';
+        mode = "0600";
+        inherit user;
+      };
+      "homeSetup/.msmtprc" = {
+        text = ''
+          account        ${user}
+          host           ${domainIp}
+          port           465
+          from           ${user}@${domain}
+          user           ${user}
+          password       ${user}-password
+          auth           on
+          tls            on
+          tls_starttls   off
+        '';
+        mode = "0600";
+        inherit user;
+      };
+    };
+  };
+in
+  nixos-lib.runTest {
+    # Wait until we actually use stalwart again
+    meta.broken = true;
+
+    hostPkgs = pkgs; # the Nixpkgs package set used outside the VMs
+
+    name = "email";
+
+    node = {
+      specialArgs = {inherit pkgsUnstable vhackPackages nixpkgs-unstable nixLib;};
+
+      # Use the nixpkgs as constructed by the `nixpkgs.*` options
+      pkgs = null;
+    };
+
+    nodes = {
+      server = {config, ...}: {
+        imports =
+          extraModules
+          ++ [
+            ../../../../modules
+          ];
+
+        vhack = {
+          nginx = {
+            enable = true;
+            selfsign = true;
+          };
+
+          stalwart-mail = {
+            enable = true;
+            fqdn = domain;
+            admin = "mailto:admin@${domain}";
+            security = null;
+            openFirewall = true;
+            principals = [
+              {
+                class = "individual";
+                name = "alice";
+                secret = "{PLAIN}alice-password";
+                email = ["alice@${domain}"];
+              }
+              {
+                class = "individual";
+                name = "bob";
+                secret = "{PLAIN}bob-password";
+                email = ["bob@${domain}"];
+              }
+            ];
+          };
+        };
+      };
+
+      alice = mkUser "alice";
+      bob = mkUser "bob";
+    };
+
+    testScript = {...}:
+    /*
+    python
+    */
+    ''
+      start_all()
+
+      server.wait_for_unit("stalwart-mail.service")
+      server.wait_for_open_port(993) # imap
+      server.wait_for_open_port(465) # smtp
+
+      with subtest("Both start without mail"):
+        alice.succeed("sudo -u alice ${scripts.checkEmailEmpty}")
+        bob.succeed("sudo -u bob ${scripts.checkEmailEmpty}")
+
+      with subtest("Alice can send an email to bob"):
+        alice.succeed("sudo -u alice ${pkgs.writeShellScript "alice-send" ''
+        set -xe
+
+        cat << EOF | msmtp --debug --account alice --tls-certcheck=off bob@${domain} >&2
+        Hi Bob!
+
+        This is an email.
+        It contains a subject and a body.
+
+        ALICE
+        EOF
+      ''}")
+        bob.succeed("sudo -u bob ${pkgs.writeShellScript "bob-receive" ''
+        set -xe
+
+        fetchmail --nosslcertck --verbose >&2 || {
+          echo New Mail did not arrive
+          exit 1
+        }
+      ''}")
+
+      server.copy_from_vm("/var/lib/", "server")
+      bob.copy_from_vm("/home/bob/mail", "bob")
+    '';
+  }
-- 
cgit v1.3.1