{ testers, module }:

testers.runNixOSTest {
  name = "knotserver-basic";

  defaults = {
    imports = [ module ];
  };

  nodes.machine = {
    services.tangled-knotserver = {
      enable = true;

      server.listenAddr = "127.0.0.1:5555";
      server.hostname = "knot.example.org";
      extraConfig.KNOT_SERVER_SECRET = "verysecuresecret";
    };
  };

  testScript = ''
    machine.wait_for_unit("knotserver.service")
    machine.wait_for_open_port(5555)
    machine.succeed('curl -f http://127.0.0.1:5555 | grep "This is a knot server"')
    machine.succeed('/run/wrappers/bin/keyfetch')
  '';
}