{
  extraModules,
  vhack,
  ...
}:
vhack.runTest {
  name = "rocie";

  serverDomains = [
    {server = "rocie.server";}
  ];

  nodes = {
    server = {config, ...}: {
      imports =
        extraModules
        ++ [
          ../../../../modules
        ];

      age.identityPaths = ["${../../../common/email/hostKey}"];

      vhack = {
        persist.enable = true;
        nginx.enable = true;
        rocie = {
          enable = true;
          domain = "rocie.server";
          loginSecret = ./secrets/login.age;
        };
      };
    };

    client = {_, ...}: {};
  };

  services = [
    {server = "rocie.service";}
  ];

  testScript = {...}:
  # Python
  ''
    client.wait_until_succeeds("curl --verbose https://rocie.server/api/can-be-provisioned > out.file")
    client.copy_from_vm("out.file")
  '';
}