{
  pkgs,
  lib,
  shb,
  ...
}:
let
  commonTestScript = shb.test.mkScripts {
    hasSSL = { node, ... }: !(isNull node.config.shb.deluge.ssl);
    waitForServices =
      { ... }:
      [
        "nginx.service"
        "deluged.service"
        "delugeweb.service"
      ];
    waitForPorts =
      { node, ... }:
      [
        node.config.shb.deluge.daemonPort
        node.config.shb.deluge.webPort
      ];
    extraScript =
      { node, proto_fqdn, ... }:
      ''
        print(${node.name}.succeed('journalctl -n100 -u deluged'))
        print(${node.name}.succeed('systemctl status deluged'))
        ${node.name}.succeed("""
          restarts="$(systemctl show deluged.service -P NRestarts)"
          if [ "$restarts" -gt 1 ]; then
            systemctl status deluged.service --no-pager
            journalctl -u deluged.service -b --no-pager
            exit 1
          fi
        """)
        print(${node.name}.succeed('systemctl status delugeweb'))

        with subtest("web connect"):
            print(server.succeed("cat ${node.config.services.deluge.dataDir}/.config/deluge/auth"))

            response = curl(client, "", "${proto_fqdn}/json", extra = unline_with(" ", """
              -H "Content-Type: application/json"
              -H "Accept: application/json"
              """), data = unline_with(" ", """
              {"method": "auth.login", "params": ["deluge"], "id": 1}
              """))
            print(response)
            if response['error']:
                raise Exception(f"error is {response['error']}")
            if not response['result']:
                raise Exception(f"response is {response}")

            response = curl(client, "", "${proto_fqdn}/json", extra = unline_with(" ", """
              -H "Content-Type: application/json"
              -H "Accept: application/json"
              """), data = unline_with(" ", """
              {"method": "web.get_hosts", "params": [], "id": 1}
              """))
            print(response)
            if response['error']:
                raise Exception(f"error is {response['error']}")

            hostID = response['result'][0][0]
            response = curl(client, "", "${proto_fqdn}/json", extra = unline_with(" ", """
              -H "Content-Type: application/json"
              -H "Accept: application/json"
              """), data = unline_with(" ", f"""
              {{"method": "web.connect", "params": ["{hostID}"], "id": 1}}
              """))
            print(response)
            if response['error']:
                raise Exception(f"result had an error {response['error']}")
      '';
  };

  prometheusTestScript =
    { nodes, ... }:
    ''
      server.wait_for_open_port(${toString nodes.server.services.prometheus.exporters.deluge.port})
      with subtest("prometheus"):
          response = server.succeed(
              "curl -sSf "
              + " http://localhost:${toString nodes.server.services.prometheus.exporters.deluge.port}/metrics"
          )
          print(response)
    '';

  basic =
    { config, ... }:
    {
      imports = [
        shb.test.baseModule
        ../../modules/blocks/hardcodedsecret.nix
        ../../modules/services/deluge.nix
      ];

      test = {
        subdomain = "d";
      };

      shb.deluge = {
        enable = true;
        inherit (config.test) domain subdomain;

        settings = {
          downloadLocation = "/var/lib/deluge";
        };

        extraUsers = {
          user.password.source = pkgs.writeText "userpw" "userpw";
        };

        localclientPassword.result = config.shb.hardcodedsecret."localclientpassword".result;
      };
      shb.hardcodedsecret."localclientpassword" = {
        request = config.shb.deluge.localclientPassword.request;
        settings.content = "localpw";
      };

      systemd.services.deluged = {
        unitConfig = {
          StartLimitIntervalSec = "30s";
          StartLimitBurst = 2;
        };

        serviceConfig = {
          Restart = lib.mkForce "on-failure";
          RestartSec = "1s";
        };
      };
    };

  clientLogin =
    { config, ... }:
    {
      imports = [
        shb.test.baseModule
        shb.test.clientLoginModule
      ];
      test = {
        subdomain = "d";
      };

      test.login = {
        passwordFieldLabelRegex = "Password";
        loginButtonNameRegex = "Login";
        testLoginWith = [
          {
            password = "deluge";
            nextPageExpect = [
              "expect(page.get_by_role('button', name='Login')).not_to_be_visible()"
              "expect(page.get_by_text('Login Failed')).not_to_be_visible()"
            ];
          }
          {
            password = "other";
            nextPageExpect = [
              "expect(page.get_by_role('button', name='Login')).to_be_visible()"
              "expect(page.get_by_text('Login Failed')).to_be_visible()"
            ];
          }
        ];
      };
    };

  prometheus =
    { config, ... }:
    {
      shb.deluge = {
        prometheusScraperPassword.result = config.shb.hardcodedsecret."scraper".result;
      };
      shb.hardcodedsecret."scraper" = {
        request = config.shb.deluge.prometheusScraperPassword.request;
        settings.content = "scraperpw";
      };
    };

  https =
    { config, ... }:
    {
      shb.deluge = {
        ssl = config.shb.certs.certs.selfsigned.n;
      };
    };

  sso =
    { config, ... }:
    {
      shb.deluge = {
        authEndpoint = "https://${config.shb.authelia.subdomain}.${config.shb.authelia.domain}";
      };
    };
in
{
  basic = shb.test.runNixOSTest {
    name = "deluge_basic";

    nodes.client = {
      imports = [
        clientLogin
      ];
    };
    nodes.server = {
      imports = [
        basic
      ];
    };

    testScript = commonTestScript.access;
  };

  backup = shb.test.runNixOSTest {
    name = "deluge_backup";

    nodes.server =
      { config, ... }:
      {
        imports = [
          basic
          (shb.test.backup config.shb.deluge.backup)
        ];
      };

    nodes.client = { };

    testScript = commonTestScript.backup;
  };

  https = shb.test.runNixOSTest {
    name = "deluge_https";

    nodes.server = {
      imports = [
        basic
        shb.test.certs
        https
      ];
    };

    nodes.client = { };

    testScript = commonTestScript.access;
  };

  sso = shb.test.runNixOSTest {
    name = "deluge_sso";

    nodes.server =
      { config, ... }:
      {
        imports = [
          basic
          shb.test.certs
          https
          shb.test.ldap
          (shb.test.sso config.shb.certs.certs.selfsigned.n)
          sso
        ];
      };

    nodes.client = { };

    testScript = commonTestScript.access.override {
      redirectSSO = true;
    };
  };

  prometheus = shb.test.runNixOSTest {
    name = "deluge_https";

    nodes.server = {
      imports = [
        basic
        shb.test.certs
        https
        prometheus
      ];
    };

    nodes.client = { };

    # The inputs attrset must be named out explicitly
    testScript =
      inputs@{ nodes, ... }: (commonTestScript.access inputs) + (prometheusTestScript inputs);
  };
}