diff --git a/checks/rabbi-gerzi-domains.nix b/checks/rabbi-gerzi-domains.nix index 65ab3fc..a421860 100644 --- a/checks/rabbi-gerzi-domains.nix +++ b/checks/rabbi-gerzi-domains.nix @@ -7,12 +7,11 @@ let frontendConfig = config.services.rabbi-gerzi.frontend; backendConfig = config.services.rabbi-gerzi.backend; - frontendVirtualHost = - config.services.nginx.virtualHosts.${frontendConfig.hostName}; - backendVirtualHost = - config.services.nginx.virtualHosts.${backendConfig.hostName}; - redirectVirtualHost = lib.attrByPath [ "www.rabbigerzi.com" ] { } - config.services.nginx.virtualHosts; + frontendVirtualHost = config.services.nginx.virtualHosts.${frontendConfig.hostName}; + backendVirtualHost = config.services.nginx.virtualHosts.${backendConfig.hostName}; + redirectVirtualHost = lib.attrByPath [ + "www.rabbigerzi.com" + ] { } config.services.nginx.virtualHosts; assertions = [ { @@ -28,25 +27,23 @@ let message = "Rabbi Gerzi backend does not use the production API domain"; } { - assertion = backendConfig.corsAllowedOrigins == [ - "https://rabbigerzi.com" - "https://rabbigerzi.yisroelbaum.com" - ]; + assertion = + backendConfig.corsAllowedOrigins == [ + "https://rabbigerzi.com" + "https://rabbigerzi.yisroelbaum.com" + ]; message = "Rabbi Gerzi CORS origins do not cover production and staging"; } { - assertion = builtins.elem "rabbigerzi.yisroelbaum.com" - frontendVirtualHost.serverAliases; + assertion = builtins.elem "rabbigerzi.yisroelbaum.com" frontendVirtualHost.serverAliases; message = "Rabbi Gerzi frontend staging alias is missing"; } { - assertion = builtins.elem "rabbigerziapi.yisroelbaum.com" - backendVirtualHost.serverAliases; + assertion = builtins.elem "rabbigerziapi.yisroelbaum.com" backendVirtualHost.serverAliases; message = "Rabbi Gerzi backend staging alias is missing"; } { - assertion = redirectVirtualHost.globalRedirect or null - == "rabbigerzi.com"; + assertion = redirectVirtualHost.globalRedirect or null == "rabbigerzi.com"; message = "Rabbi Gerzi www host does not redirect to the apex"; } { @@ -63,8 +60,7 @@ let in pkgs.runCommand "rabbi-gerzi-production-domains" { - failures = lib.concatMapStringsSep "\n" - (assertion: assertion.message) failedAssertions; + failures = lib.concatMapStringsSep "\n" (assertion: assertion.message) failedAssertions; preferLocalBuild = true; } '' diff --git a/flake.nix b/flake.nix index 0506c80..fc821ec 100644 --- a/flake.nix +++ b/flake.nix @@ -59,12 +59,11 @@ } ]; }; - checks."${system}".rabbi-gerzi-domains = - import ./checks/rabbi-gerzi-domains.nix { - config = self.nixosConfigurations.nixos.config; - inherit (nixpkgs) lib; - pkgs = nixpkgs.legacyPackages.${system}; - }; + checks."${system}".rabbi-gerzi-domains = import ./checks/rabbi-gerzi-domains.nix { + config = self.nixosConfigurations.nixos.config; + inherit (nixpkgs) lib; + pkgs = nixpkgs.legacyPackages.${system}; + }; devShells."${system}".default = let pkgs = import nixpkgs { inherit system; };