clan-core/checks/secrets/default.nix

(import ../lib/test-base.nix) {
  name = "secrets";

  nodes.machine = { self, config, ... }: {
    imports = [
      (self.nixosModules.clanCore)
    ];
    environment.etc."secret".source = config.sops.secrets.secret.path;
    environment.etc."group-secret".source = config.sops.secrets.group-secret.path;
    sops.age.keyFile = ./key.age;

    clanCore.clanDir = "${./.}";
    clanCore.machineName = "machine";

    networking.hostName = "machine";
  };
  testScript = ''
    machine.succeed("cat /etc/secret >&2")
    machine.succeed("cat /etc/group-secret >&2")
  '';
}