core/tests: Update upstream NixOS tests

It has been a while, since we did a full update of all the tests, which
we last did in 3ea85a699a65dbdd4f633d21e70be6859b0f3f8f (April 2018).

Since then, a whole lot of tests were added and a few of them got
removed as well. Since we only did incremential updates whenever
something broke, we didn't have any newer tests.

We should now have conditions of all the tests we have in nixpkgs
master[1] minus a few special ones, which are only related to upstream
image generation (eg. the ec2 test).

[1]: https://github.com/NixOS/nixpkgs/commit/637bb9fa984238f2f7e6235ca11

Signed-off-by: aszlig <aszlig@nix.build>

1 files changed, 606 insertions, 63 deletions

diff --git a/modules/core/tests.nix b/modules/core/tests.nix
index 8e3c6573..cd207f04 100644
--- a/modules/core/tests.nix
+++ b/modules/core/tests.nix
@@ -10,40 +10,90 @@ let
   anyAttrs = pred: cfg: any lib.id (lib.mapAttrsToList (lib.const pred) cfg);
   hasPackage = p: any (x: x.name == p.name) config.environment.systemPackages;
 
+  mkPrometheusExporterTest = name: {
+    check = config.services.prometheus.exporters.${name}.enable;
+    path = ["nixos" "prometheus-exporters" name];
+  };
+
   upstreamTests = lib.concatMap mkTest [
+    { check = config.services._3proxy.enable;
+      path  = ["nixos" "_3proxy"];
+    }
     { check = config.security.acme.certs != {};
       path  = ["nixos" "acme"];
     }
     { check = config.services.atd.enable;
       path  = ["nixos" "atd"];
     }
+    { check = config.services.automysqlbackup.enable;
+      path  = ["nixos" "automysqlbackup"];
+    }
     { check = config.services.avahi.enable;
       path  = ["nixos" "avahi"];
     }
+    { check = config.services.babeld.enable;
+      path  = ["nixos" "babeld"];
+    }
+    { check = elem "bcachefs" config.boot.supportedFilesystems;
+      path  = ["nixos" "bcachefs"];
+    }
+    { check = config.services.beanstalkd.enable;
+      path  = ["nixos" "beanstalkd"];
+    }
+    { check = config.services.beesd.filesystems != {};
+      path  = ["nixos" "bees"];
+    }
+    { check = config.services.bind.enable;
+      path  = ["nixos" "bind"];
+    }
+    { check = config.services.transmission.enable
+           || config.services.opentracker.enable;
+      path  = ["nixos" "bittorrent"];
+    }
+    { check = config.services.buildkite-agent.enable;
+      path  = ["nixos" "buildkite-agent"];
+    }
     { check = config.vuizvui.createISO;
       paths = [
         ["nixos" "boot" "biosCdrom"]
+        ["nixos" "boot" "biosNetboot"]
         ["nixos" "boot" "biosUsb"]
-        ["nixos" "boot" "netboot"]
         ["nixos" "boot" "uefiCdrom"]
+        ["nixos" "boot" "uefiNetboot"]
         ["nixos" "boot" "uefiUsb"]
       ];
     }
     { check = true;
       path  = ["nixos" "boot-stage1"];
     }
+    { check = config.services.borgbackup.jobs != {}
+           || config.services.borgbackup.repos != {};
+      path  = ["nixos" "borgbackup"];
+    }
     { check = config.services.buildbot-master.enable
            || config.services.buildbot-worker.enable;
       path  = ["nixos" "buildbot"];
     }
+    { check = config.services.caddy.enable;
+      path  = ["nixos" "caddy"];
+    }
     { check = config.services.cadvisor.enable;
       path  = ["nixos" "cadvisor"];
     }
-    { check = config.services.ceph.enable
-           || config.services.ceph.mon.enable
-           || config.services.ceph.mgr.enable
-           || config.services.ceph.osd.enable;
-      path  = ["nixos" "ceph"];
+    { check = config.services.cassandra.enable;
+      path  = ["nixos" "cassandra"];
+    }
+    { check = config.services.ceph.enable;
+      paths = [
+        ["nixos" "ceph-single-node"]
+        ["nixos" "ceph-multi-node"]
+      ];
+    }
+    { check = config.services.certmgr.enable;
+      path  = ["nixos" "certmgr"];
+    }
+    { check = config.services.cfssl.enable;
+      path  = ["nixos" "cfssl"];
     }
     { check = hasPackage pkgs.chromium;
       path  = ["nixos" "chromium"];
@@ -51,18 +101,27 @@ let
     { check = config.services.cjdns.enable;
       path  = ["nixos" "cjdns"];
     }
+    { check = config.services.clickhouse.enable;
+      path  = ["nixos" "clickhouse"];
+    }
     { check = config.services.cloud-init.enable;
       path  = ["nixos" "cloud-init"];
     }
-    { check = config.boot.enableContainers
-           && config.containers != {};
-      path  = ["nixos" "containers"];
+    { check = config.services.codimd.enable;
+      path  = ["nixos" "codimd"];
+    }
+    { check = config.services.consul.enable;
+      path  = ["nixos" "consul"];
     }
     { check = config.boot.enableContainers
            && anyAttrs (i: i.hostBridge != null) config.containers;
       path  = ["nixos" "containers-bridge"];
     }
     { check = config.boot.enableContainers
+           && anyAttrs (i: i.ephemeral) config.containers;
+      path  = ["nixos" "containers-ephemeral"];
+    }
+    { check = config.boot.enableContainers
            && anyAttrs (i: i.extraVeths != {}) config.containers;
       path  = ["nixos" "containers-extra_veth"];
     }
@@ -76,12 +135,7 @@ let
     { check = config.boot.enableContainers
            && anyAttrs (i: i.hostAddress  != null
                         || i.localAddress != null) config.containers;
-      path  = ["nixos" "containers-ipv4"];
-    }
-    { check = config.boot.enableContainers
-           && anyAttrs (i: i.hostAddress6  != null
-                        || i.localAddress6 != null) config.containers;
-      path  = ["nixos" "containers-ipv6"];
+      path  = ["nixos" "containers-ip"];
     }
     { check = config.boot.enableContainers
            && anyAttrs (i: i.macvlans != []) config.containers;
@@ -92,6 +146,10 @@ let
       path  = ["nixos" "containers-physical_interfaces"];
     }
     { check = config.boot.enableContainers
+           && anyAttrs (i: i.forwardPorts != []) config.containers;
+      path  = ["nixos" "containers-portforward"];
+    }
+    { check = config.boot.enableContainers
            && anyAttrs (i: i.privateNetwork) config.containers;
       path  = ["nixos" "containers-restart_networking"];
     }
@@ -99,14 +157,21 @@ let
            && anyAttrs (i: i.tmpfs != []) config.containers;
       path  = ["nixos" "containers-tmpfs"];
     }
+    { check = config.services.corerad.enable;
+      path  = ["nixos" "corerad"];
+    }
     { check = config.services.couchdb.enable;
       path  = ["nixos" "couchdb"];
     }
     { check = config.services.deluge.enable;
       path  = ["nixos" "deluge"];
     }
-    { check = config.services.dnscrypt-proxy.enable;
-      path  = ["nixos" "dnscrypt-proxy"];
+    { check = config.security.dhparams.enable
+           && config.security.dhparams.stateful;
+      path  = ["nixos" "dhparams"];
+    }
+    { check = config.services.dnscrypt-proxy2.enable;
+      path  = ["nixos" "dnscrypt-proxy2"];
     }
     { check = config.virtualisation.docker.enable;
       paths = [
@@ -114,25 +179,54 @@ let
         ["nixos" "docker-tools"]
       ];
     }
+    { check = config.docker-containers != {};
+      path  = ["nixos" "docker-containers"];
+    }
     { check = with config.virtualisation.docker; enable
            && package.name == pkgs.docker-edge.name;
       path  = ["nixos" "docker-edge"];
     }
+    { check = config.virtualisation.dockerPreloader.enable;
+      path  = ["nixos" "docker-preloader"];
+    }
+    { check = config.services.dockerRegistry.enable;
+      path  = ["nixos" "docker-registry"];
+    }
     { check = config.virtualisation.docker.enable
            && config.virtualisation.docker.storageDriver == "overlay";
       path  = ["nixos" "docker-tools-overlay"];
     }
+    { check = config.services.documize.enable;
+      path  = ["nixos" "documize"];
+    }
+    { check = config.services.dokuwiki.enable;
+      path  = ["nixos" "dokuwiki"];
+    }
     { check = config.services.dovecot2.enable;
       path  = ["nixos" "dovecot"];
     }
     { check = config.security.pam.enableEcryptfs;
       path  = ["nixos" "ecryptfs"];
     }
+    { check = config.services.ejabberd.enable;
+      path  = ["nixos" "ejabberd"];
+    }
+    { check = config.services.logstash.enable
+           || config.services.elasticsearch.enable
+           || config.services.kibana.enable;
+      path  = ["nixos" "elk"];
+    }
     { check = true;
       path  = ["nixos" "env"];
     }
     { check = config.services.etcd.enable;
-      path  = ["nixos" "etcd"];
+      paths = [
+        ["nixos" "etcd"]
+        ["nixos" "etcd-cluster"]
+      ];
+    }
+    { check = config.hardware.fancontrol.enable;
+      path  = ["nixos" "fancontrol"];
     }
     { check = config.services.ferm.enable;
       path  = ["nixos" "ferm"];
@@ -143,20 +237,52 @@ let
     { check = config.networking.firewall.enable;
       path  = ["nixos" "firewall"];
     }
-    { check = config.services.fwupd.enable;
-      path  = ["nixos" "fwupd"];
+    { check = config.programs.fish.enable;
+      path  = ["nixos" "fish"];
+    }
+    { check = config.services.flannel.enable;
+      path  = ["nixos" "flannel"];
+    }
+    { check = config.services.fluentd.enable;
+      path  = ["nixos" "fluentd"];
+    }
+    { check = config.fonts.enableDefaultFonts;
+      path  = ["nixos" "fontconfig-default-fonts"];
+    }
+    { check = config.services.freeswitch.enable;
+      path  = ["nixos" "freeswitch"];
+    }
+    { check = true;
+      path  = ["nixos" "fsck"];
+    }
+    { check = config.services.gotify.enable;
+      path  = ["nixos" "gotify-server"];
+    }
+    { check = config.services.grocy.enable;
+      path  = ["nixos" "grocy"];
+    }
+    { check = config.services.gitea.enable;
+      path  = ["nixos" "gitea"];
+    }
+    { check = config.services.gitlab.enable;
+      path  = ["nixos" "gitlab"];
     }
     { check = config.services.gitolite.enable;
       path  = ["nixos" "gitolite"];
     }
-    { check = hasPackage pkgs.gnome-desktop-testing;
-      path  = ["nixos" "gjs"];
+    { check = config.services.gitolite.enable
+           && config.services.fcgiwrap.enable;
+      path  = ["nixos" "gitolite-fcgiwrap"];
     }
-    { check = config.services.xserver.desktopManager.gnome3.enable;
-      path  = ["nixos" "gnome3"];
+    { check = config.services.glusterfs.enable;
+      path  = ["nixos" "glusterfs"];
     }
-    { check = config.services.xserver.displayManager.gdm.enable;
-      path  = ["nixos" "gnome3-gdm"];
+    { check = config.services.xserver.desktopManager.gnome3.enable;
+      paths = [
+        ["nixos" "gnome3"]
+        ["nixos" "gnome3-xorg"]
+        ["nixos" "installed-tests"]
+      ];
     }
     { check = config.services.gocd-agent.enable;
       path  = ["nixos" "gocd-agent"];
@@ -164,6 +290,9 @@ let
     { check = config.services.gocd-server.enable;
       path  = ["nixos" "gocd-server"];
     }
+    { check = config.security.googleOsLogin.enable;
+      path  = ["nixos" "google-oslogin"];
+    }
     { check = config.services.grafana.enable;
       path  = ["nixos" "grafana"];
     }
@@ -173,26 +302,66 @@ let
            || beacon.enable;
       path  = ["nixos" "graphite"];
     }
-    { check = config.security.lockKernelModules
+    { check = config.services.graylog.enable;
+      path  = ["nixos" "graylog"];
+    }
+    { check = hasPackage pkgs.gvisor;
+      path  = ["nixos" "gvisor"];
+    }
+    { check = config.services.hadoop.hdfs.namenode.enabled
+           || config.services.hadoop.hdfs.datanode.enabled;
+      path  = ["nixos" "hadoop" "hdfs"];
+    }
+    { check = config.services.hadoop.yarn.resourcemanager.enabled
+           || config.services.hadoop.yarn.nodemanager.enabled;
+      path  = ["nixos" "hadoop" "yarn"];
+    }
+    { check = hasPackage pkgs.handbrake;
+      path  = ["nixos" "handbrake"];
+    }
+    { check = config.services.haproxy.enable;
+      path  = ["nixos" "haproxy"];
+    }
+    { check = config.security.apparmor.enable
+           || config.security.forcePageTableIsolation
            || config.security.hideProcessInformation
-           || config.boot.kernel.sysctl."user.max_user_namespaces" or 1 == 0;
+           || config.security.lockKernelModules
+           || config.security.protectKernelImage;
       path  = ["nixos" "hardened"];
     }
     { check = true;
       path  = ["nixos" "hibernate"];
     }
+    { check = config.services.hitch.enable;
+      path  = ["nixos" "hitch"];
+    }
     { check = config.services.home-assistant.enable;
       path  = ["nixos" "home-assistant"];
     }
     { check = config.services.hound.enable;
       path  = ["nixos" "hound"];
     }
+    { check = config.services.hydra.enable;
+      path  = ["nixos" "hydra"];
+    }
     { check = config.services.xserver.windowManager.i3.enable;
       path  = ["nixos" "i3wm"];
     }
+    { check = config.services.icingaweb2.enable;
+      path  = ["nixos" "icingaweb2"];
+    }
     { check = config.programs.iftop.enable;
       path  = ["nixos" "iftop"];
     }
+    { check = config.services.ihatemoney.enable;
+      path  = ["nixos" "ihatemoney"];
+    }
+    { check = config.services.incron.enable;
+      path  = ["nixos" "incron"];
+    }
+    { check = config.services.influxdb.enable;
+      path  = ["nixos" "influxdb"];
+    }
     { check = config.boot.initrd.network.enable;
       path  = ["nixos" "initrdNetwork"];
     }
@@ -206,11 +375,19 @@ let
         ["nixos" "installer" "btrfsSubvolDefault"]
       ];
     }
+    { check = anyAttrs (f: f.encrypted.enable) config.fileSystems
+           || lib.any (s: s.encrypted.enable) config.swapDevices;
+      path  = ["nixos" "installer" "encryptedFSWithKeyfile"];
+    }
     { check = config.boot.loader.grub.version == 1;
       path  = ["nixos" "installer" "grub1"];
     }
     { check = config.boot.initrd.luks.devices != [];
-      path  = ["nixos" "installer" "luksroot"];
+      paths = [
+        ["nixos" "installer" "luksroot"]
+        ["nixos" "installer" "luksroot-format1"]
+        ["nixos" "installer" "luksroot-format2"]
+      ];
     }
     { check = true;
       path  = ["nixos" "installer" "lvm"];
@@ -225,6 +402,19 @@ let
     { check = elem "ext3" config.boot.supportedFilesystems;
       path  = ["nixos" "installer" "simple"];
     }
+    { check = elem "ext3" config.boot.supportedFilesystems
+           && config.nesting.clone != [];
+      path  = ["nixos" "installer" "simpleClone"];
+    }
+    { check = config.boot.loader.grub.device == "nodev"
+           && config.boot.loader.grub.efiSupport;
+      path  = ["nixos" "installer" "simpleUefiGrub"];
+    }
+    { check = config.boot.loader.grub.device == "nodev"
+           && config.boot.loader.grub.efiSupport
+           && config.nesting.clone != [];
+      path  = ["nixos" "installer" "simpleUefiGrubClone"];
+    }
     { check = config.boot.loader.systemd-boot.enable;
       path  = ["nixos" "installer" "simpleUefiSystemdBoot"];
     }
@@ -237,46 +427,77 @@ let
     { check = config.boot.initrd.mdadmConf != "";
       path  = ["nixos" "installer" "swraid"];
     }
-    { check = config.services.influxdb.enable;
-      path  = ["nixos" "influxdb"];
+    { check = elem "zfs" config.boot.supportedFilesystems;
+      path  = ["nixos" "installer" "zfsroot"];
     }
     { check = config.networking.enableIPv6;
       path  = ["nixos" "ipv6"];
     }
+    { check = config.services.jackett.enable;
+      path  = ["nixos" "jackett"];
+    }
+    { check = config.services.jellyfin.enable;
+      path  = ["nixos" "jellyfin"];
+    }
     { check = config.services.jenkins.enable;
       path  = ["nixos" "jenkins"];
     }
-    { check = config.i18n.consoleKeyMap          == "azerty/fr"
+    { check = config.services.apache-kafka.enable;
+      path  = ["nixos" "kafka"];
+    }
+    { check = config.services.keepalived.enable;
+      path  = ["nixos" "keepalived"];
+    }
+    { check = let
+        isHeimdal = lib.hasPrefix "heimdal" config.krb5.kerberos.name;
+        isServer = config.services.kerberos_server.enable;
+      in isHeimdal && (isServer || config.krb5.enable);
+      path  = ["nixos" "kerberos" "heimdal"];
+    }
+    { check = let
+        isHeimdal = lib.hasPrefix "heimdal" config.krb5.kerberos.name;
+        isServer = config.services.kerberos_server.enable;
+      in !isHeimdal && (isServer || config.krb5.enable);
+      path  = ["nixos" "kerberos" "mit"];
+    }
+    { check = config.boot.kernelPackages.kernel.version
+           == pkgs.linuxPackages_latest.kernel.version;
+      path  = ["nixos" "kernel-latest"];
+    }
+    { check = config.boot.kernelPackages.kernel.version
+           == pkgs.linuxPackages.kernel.version;
+      path  = ["nixos" "kernel-lts"];
+    }
+    { check = config.boot.kernelPackages.kernel.version
+           == pkgs.linuxPackages_testing.kernel.version;
+      path  = ["nixos" "kernel-testing"];
+    }
+    { check = config.console.keyMap              == "azerty/fr"
            || config.services.xserver.layout     == "fr";
       path  = ["nixos" "keymap" "azerty"];
     }
-    { check = config.i18n.consoleKeyMap          == "en-latin9"
+    { check = config.console.keyMap              == "colemak/colemak"
            || config.services.xserver.xkbVariant == "colemak";
       path  = ["nixos" "keymap" "colemak"];
     }
-    { check = config.i18n.consoleKeyMap          == "dvorak"
+    { check = config.console.keyMap              == "dvorak"
            || config.services.xserver.layout     == "dvorak";
       path  = ["nixos" "keymap" "dvorak"];
     }
-    { check = config.i18n.consoleKeyMap          == "dvp"
+    { check = config.console.keyMap              == "dvp"
            || config.services.xserver.xkbVariant == "dvp";
       path  = ["nixos" "keymap" "dvp"];
     }
-    { check = config.i18n.consoleKeyMap          == "neo"
+    { check = config.console.keyMap              == "neo"
            || config.services.xserver.xkbVariant == "neo";
       path  = ["nixos" "keymap" "neo"];
     }
-    { check = config.i18n.consoleKeyMap          == "de"
+    { check = config.console.keyMap              == "de"
            || config.services.xserver.layout     == "de";
       path  = ["nixos" "keymap" "qwertz"];
     }
-    { check = config.boot.kernelPackages.kernel.version
-           == pkgs.linuxPackages_latest.kernel.version;
-      path  = ["nixos" "kernel-latest"];
-    }
-    { check = config.boot.kernelPackages.kernel.version
-           == pkgs.linuxPackages.kernel.version;
-      path  = ["nixos" "kernel-lts"];
+    { check = config.services.knot.enable;
+      path  = ["nixos" "knot"];
     }
     { check = with config.services.kubernetes; apiserver.enable
            || scheduler.enable || controllerManager.enable || kubelet.enable
@@ -292,31 +513,89 @@ let
            == pkgs.linuxPackages_latest.kernel.version;
       path  = ["nixos" "latestKernel" "login"];
     }
-    { check = config.services.openldap.enable;
+    { check = config.services.openldap.enable
+           || config.users.ldap.enable;
       path  = ["nixos" "ldap"];
     }
     { check = config.services.leaps.enable;
       path  = ["nixos" "leaps"];
     }
+    { check = config.services.lidarr.enable;
+      path  = ["nixos" "lidarr"];
+    }
+    { check = config.services.xserver.displayManager.lightdm.enable;
+      path  = ["nixos" "lightdm"];
+    }
+    { check = config.services.limesurvey.enable;
+      path  = ["nixos" "limesurvey"];
+    }
     { check = true;
       path  = ["nixos" "login"];
     }
+    { check = config.services.loki.enable;
+      path  = ["nixos" "loki"];
+    }
+    { check = hasPackage pkgs.lorri;
+      path  = ["nixos" "lorri"];
+    }
+    { check = config.services.magnetico.enable;
+      path  = ["nixos" "magnetico"];
+    }
+    { check = config.services.mailcatcher.enable;
+      path  = ["nixos" "mailcatcher"];
+    }
     { check = config.services.mathics.enable;
       path  = ["nixos" "mathics"];
     }
+    { check = config.services.matomo.enable;
+      path  = ["nixos" "matomo"];
+    }
     { check = config.services.matrix-synapse.enable;
       path  = ["nixos" "matrix-synapse"];
     }
+    { check = config.services.mediawiki.enable;
+      path  = ["nixos" "mediawiki"];
+    }
+    { check = config.services.memcached.enable;
+      path  = ["nixos" "memcached"];
+    }
     { check = config.services.mesos.master.enable
            || config.services.mesos.slave.enable;
       path  = ["nixos" "mesos"];
     }
+    { check = config.services.metabase.enable;
+      path  = ["nixos" "metabase"];
+    }
+    { check = config.services.miniflux.enable;
+      path  = ["nixos" "miniflux"];
+    }
+    { check = config.services.minio.enable;
+      path  = ["nixos" "minio"];
+    }
+    { check = config.services.minidlna.enable;
+      path  = ["nixos" "minidlna"];
+    }
     { check = true;
       path  = ["nixos" "misc"];
     }
+    { check = config.services.moinmoin.enable;
+      path  = ["nixos" "moinmoin"];
+    }
     { check = config.services.mongodb.enable;
       path  = ["nixos" "mongodb"];
     }
+    { check = config.services.moodle.enable;
+      path  = ["nixos" "moodle"];
+    }
+    { check = config.services.morty.enable;
+      path  = ["nixos" "morty"];
+    }
+    { check = config.services.mosquitto.enable;
+      path  = ["nixos" "mosquitto"];
+    }
+    { check = config.services.mpd.enable;
+      path  = ["nixos" "mpd"];
+    }
     { check = config.services.murmur.enable;
       path  = ["nixos" "mumble"];
     }
@@ -327,6 +606,9 @@ let
     { check = true;
       path  = ["nixos" "mutableUsers"];
     }
+    { check = config.services.mxisd.enable;
+      path  = ["nixos" "mxisd"];
+    }
     { check = config.services.mysql.enable;
       path  = ["nixos" "mysql"];
     }
@@ -337,6 +619,9 @@ let
            && config.services.mysql.replication.role != "none";
       path  = ["nixos" "mysqlReplication"];
     }
+    { check = config.services.nagios.enable;
+      path  = ["nixos" "nagios"];
+    }
     { check = config.networking.nat.enable
            && config.networking.firewall.enable;
       path  = ["nixos" "nat" "firewall"];
@@ -352,6 +637,16 @@ let
            && !config.networking.firewall.enable;
       path  = ["nixos" "nat" "standalone"];
     }
+    { check = config.services.ndppd.enable;
+      path  = ["nixos" "ndppd"];
+    }
+    { check = config.services.neo4j.enable;
+      path  = ["nixos" "neo4j"];
+    }
+    { check = config.nesting.clone != []
+           || config.nesting.children != [];
+      path  = ["nixos" "nesting"];
+    }
     { check = config.services.netdata.enable;
       path  = ["nixos" "netdata"];
     }
@@ -373,6 +668,16 @@ let
     { check = config.networking.macvlans != {};
       path  = ["nixos" "networking" whichNet "macvlan"];
     }
+    { check = let
+        hasPrivacy = iface: iface.tempAddress == "default"
+                         || iface.tempAddress == "enabled";
+      in anyAttrs hasPrivacy config.networking.interfaces;
+      path  = ["nixos" "networking" whichNet "privacy"];
+    }
+    { check = anyAttrs (i: i.ipv4.routes != [] || i.ipv6.routes != [])
+              config.networking.interfaces;
+      path  = ["nixos" "networking" whichNet "routes"];
+    }
     { check = config.networking.sits != {};
       path  = ["nixos" "networking" whichNet "sit"];
     }
@@ -380,6 +685,9 @@ let
               config.networking.interfaces;
       path  = ["nixos" "networking" whichNet "static"];
     }
+    { check = anyAttrs (i: i.virtual) config.networking.interfaces;
+      path  = ["nixos" "networking" whichNet "virtual"];
+    }
     { check = config.networking.vlans != {};
       path  = ["nixos" "networking" whichNet "vlan"];
     }
@@ -389,6 +697,20 @@ let
             ];
       path  = ["nixos" "networkingProxy"];
     }
+    { check = config.services.nextcloud.enable;
+      path  = ["nixos" "nextcloud" "basic"];
+    }
+    { check = config.services.nextcloud.enable
+           && config.services.nextcloud.config.dbtype == "mysql";
+      path  = ["nixos" "nextcloud" "with-mysql-and-memcached"];
+    }
+    { check = config.services.nextcloud.enable
+           && config.services.nextcloud.config.dbtype == "pgsql";
+      path  = ["nixos" "nextcloud" "with-postgresql-and-redis"];
+    }
+    { check = config.services.nexus.enable;
+      path  = ["nixos" "nexus"];
+    }
     { check = elem "nfs" config.boot.supportedFilesystems;
       paths = [
         ["nixos" "nfs3"]
@@ -399,42 +721,94 @@ let
       path  = ["nixos" "nghttpx"];
     }
     { check = config.services.nginx.enable;
-      path  = ["nixos" "nginx"];
+      paths = [
+        ["nixos" "nginx"]
+        ["nixos" "nginx-etag"]
+      ];
+    }
+    { check = config.services.nginx.sso.enable;
+      path  = ["nixos" "nginx-sso"];
     }
     { check = config.nix.sshServe.enable;
       path  = ["nixos" "nix-ssh-serve"];
     }
+    { check = true;
+      path  = ["nixos" "nixos-generate-config"];
+    }
     { check = config.services.novacomd.enable;
       path  = ["nixos" "novacomd"];
     }
     { check = config.services.nsd.enable;
       path  = ["nixos" "nsd"];
     }
-    { check = config.services.openssh.enable;
-      path  = ["nixos" "openssh"];
+    { check = config.services.nzbget.enable;
+      path  = ["nixos" "nzbget"];
+    }
+    { check = config.services.openarena.enable;
+      path  = ["nixos" "openarena"];
     }
     { check = config.services.openldap.enable;
       path  = ["nixos" "openldap"];
     }
-    { check = let
-        hasOCSubServiceType = any (y: y.serviceType == "owncloud");
-        hasOCSubService = any (x: hasOCSubServiceType x.extraSubservices);
-        hasOwnCloud = config.services.httpd.virtualHosts;
-      in config.services.httpd.enable && hasOwnCloud;
-      path  = ["nixos" "owncloud"];
+    { check = config.services.opensmtpd.enable;
+      path  = ["nixos" "opensmtpd"];
+    }
+    { check = config.services.openssh.enable;
+      path  = ["nixos" "openssh"];
+    }
+    { check = config.services.orangefs.client.enable
+           || config.services.orangefs.server.enable;
+      path  = ["nixos" "orangefs"];
+    }
+    { check = config.boot.loader.grub.enable
+           && config.boot.loader.grub.useOSProber;
+      path  = ["nixos" "os-prober"];
+    }
+    { check = config.services.osrm.enable;
+      path  = ["nixos" "osrm-backend"];
+    }
+    { check = true;
+      path  = ["nixos" "overlayfs"];
+    }
+    { check = config.services.packagekit.enable;
+      path  = ["nixos" "packagekit"];
     }
     { check = config.security.pam.oath.enable;
       path  = ["nixos" "pam-oath-login"];
     }
+    { check = config.security.pam.u2f.enable;
+      path  = ["nixos" "pam-u2f"];
+    }
+    { check = config.services.xserver.desktopManager.pantheon.enable;
+      path  = ["nixos" "pantheon"];
+    }
+    { check = config.services.paperless.enable;
+      path  = ["nixos" "paperless"];
+    }
     { check = config.services.peerflix.enable;
       path  = ["nixos" "peerflix"];
     }
+    { check = with config.services.postgresql; enable
+           && lib.any (lib.hasPrefix "pgjwt") extraPlugins;
+      path  = ["nixos" "pgjwt"];
+    }
+    { check = config.services.pgmanage.enable;
+      path  = ["nixos" "pgmanage"];
+    }
+    { check = config.services.httpd.enable
+           && config.services.httpd.enablePHP;
+      path  = ["nixos" "php-pcre"];
+    }
     { check = config.services.xserver.desktopManager.plasma5.enable;
       path  = ["nixos" "plasma5"];
     }
     { check = config.programs.plotinus.enable;
       path  = ["nixos" "plotinus"];
     }
+    { check = with config.services.postgresql; enable
+           && lib.any (lib.hasPrefix "postgis") extraPlugins;
+      path  = ["nixos" "postgis"];
+    }
     { check = config.services.postgresql.enable;
       path  = let
         filterPg = name: drv: lib.hasPrefix "postgresql" name
@@ -442,9 +816,15 @@ let
         pgPackage = lib.head (lib.attrNames (lib.filterAttrs filterPg pkgs));
       in ["nixos" "postgresql" pgPackage];
     }
+    { check = config.services.postgresqlWalReceiver.receivers != {};
+      path  = ["nixos" "postgresql-wal-receiver"];
+    }
     { check = config.services.powerdns.enable;
       path  = ["nixos" "powerdns"];
     }
+    { check = config.services.pppd.enable;
+      path  = ["nixos" "pppd"];
+    }
     { check = config.networking.usePredictableInterfaceNames
            && !config.networking.useNetworkd;
       path  = ["nixos" "predictable-interface-names" "predictable"];
@@ -467,9 +847,33 @@ let
     { check = config.services.prometheus.enable;
       path  = ["nixos" "prometheus"];
     }
+    # TODO: Generate automatically!
+    (mkPrometheusExporterTest "bind")
+    (mkPrometheusExporterTest "blackbox")
+    (mkPrometheusExporterTest "collectd")
+    (mkPrometheusExporterTest "dnsmasq")
+    (mkPrometheusExporterTest "dovecot")
+    (mkPrometheusExporterTest "fritzbox")
+    (mkPrometheusExporterTest "json")
+    (mkPrometheusExporterTest "mail")
+    (mkPrometheusExporterTest "nextcloud")
+    (mkPrometheusExporterTest "nginx")
+    (mkPrometheusExporterTest "node")
+    (mkPrometheusExporterTest "postfix")
+    (mkPrometheusExporterTest "postgres")
+    (mkPrometheusExporterTest "rspamd")
+    (mkPrometheusExporterTest "snmp")
+    (mkPrometheusExporterTest "surfboard")
+    (mkPrometheusExporterTest "tor")
+    (mkPrometheusExporterTest "varnish")
+    (mkPrometheusExporterTest "wireguard")
     { check = config.services.prosody.enable;
       path  = ["nixos" "prosody"];
     }
+    { check = with config.services.prosody; enable
+           && builtins.match ".*MySQL.*" extraConfig != null;
+      path  = ["nixos" "prosodyMysql"];
+    }
     { check = config.services.httpd.enable
            && elem "proxy_balancer" config.services.httpd.extraModules;
       path  = ["nixos" "proxy"];
@@ -480,12 +884,33 @@ let
     { check = config.services.rabbitmq.enable;
       path  = ["nixos" "rabbitmq"];
     }
+    { check = config.services.radarr.enable;
+      path  = ["nixos" "radarr"];
+    }
     { check = config.services.radicale.enable;
       path  = ["nixos" "radicale"];
     }
+    { check = config.services.redis.enable;
+      path  = ["nixos" "redis"];
+    }
+    { check = config.services.redmine.enable;
+      path  = ["nixos" "redmine"];
+    }
+    { check = config.services.restic.backups != {};
+      path  = ["nixos" "restic"];
+    }
+    { check = config.services.roundcube.enable;
+      path  = ["nixos" "roundcube"];
+    }
     { check = config.services.rspamd.enable;
       path  = ["nixos" "rspamd"];
     }
+    { check = config.services.rss2email.enable;
+      path  = ["nixos" "rss2email"];
+    }
+    { check = config.services.rsyslogd.enable;
+      path  = ["nixos" "rsyslogd"];
+    }
     { check = true;
       path  = ["nixos" "runInMachine"];
     }
@@ -495,21 +920,45 @@ let
     { check = config.services.samba.enable;
       path  = ["nixos" "samba"];
     }
+    { check = config.services.sanoid.enable;
+      path  = ["nixos" "sanoid"];
+    }
     { check = config.services.xserver.displayManager.sddm.enable;
       paths = [
         ["nixos" "sddm" "default"]
         ["nixos" "sddm" "autoLogin"]
       ];
     }
+    { check = config.services.shiori.enable;
+      path  = ["nixos" "shiori"];
+    }
+    { check = hasPackage pkgs.signal-desktop;
+      path  = ["nixos" "signal-desktop"];
+    }
     { check = true;
       path  = ["nixos" "simple"];
     }
-    { check = config.services.snapper.configs != {};
-      path  = ["nixos" "snapper"];
+    { check = config.services.slurm.enableStools
+           || config.services.slurm.client.enable
+           || config.services.slurm.server.enable
+           || config.services.slurm.dbdserver.enable;
+      path = ["nixos" "slurm"];
     }
     { check = config.services.smokeping.enable;
       path  = ["nixos" "smokeping"];
     }
+    { check = config.services.snapper.configs != {};
+      path  = ["nixos" "snapper"];
+    }
+    { check = config.services.solr.enable;
+      path  = ["nixos" "solr"];
+    }
+    { check = config.services.spacecookie.enable;
+      path  = ["nixos" "spacecookie"];
+    }
+    { check = config.services.sonarr.enable;
+      path  = ["nixos" "sonarr"];
+    }
     { check = config.services.strongswan-swanctl.enable;
       path  = ["nixos" "strongswan-swanctl"];
     }
@@ -519,24 +968,88 @@ let
     { check = true;
       path  = ["nixos" "switchTest"];
     }
+    { check = config.services.sympa.enable;
+      path  = ["nixos" "sympa"];
+    }
+    { check = config.services.syncthing.enable;
+      path  = ["nixos" "syncthing-init"];
+    }
+    { check = config.services.syncthing.relay.enable;
+      path  = ["nixos" "syncthing-relay"];
+    }
     { check = true;
-      path  = ["nixos" "systemd"];
+      paths = [
+        ["nixos" "systemd"]
+        ["nixos" "systemd-analyze"]
+        ["nixos" "systemd-nspawn"]
+        ["nixos" "systemd-timesyncd"]
+      ];
+    }
+    { check = anyAttrs (s: s.confinement.enable) config.systemd.services;
+      path  = ["nixos" "systemd-confinement"];
+    }
+    { check = let
+        isVrf = anyAttrs (n: n.netdevConfig.Kind or "" == "vrf");
+      in config.networking.useNetworkd && isVrf config.systemd.network.netdevs;
+      path  = ["nixos" "systemd-networkd-vrf"];
+    }
+    { check = let
+        isWG = anyAttrs (n: n.netdevConfig.Kind or "" == "wireguard");
+      in config.networking.useNetworkd && isWG config.systemd.network.netdevs;
+      path  = ["nixos" "systemd-networkd-wireguard"];
+    }
+    { check = config.services.pdns-recursor.enable;
+      path  = ["nixos" "pdns-recursor"];
     }
     { check = config.services.taskserver.enable;
       path  = ["nixos" "taskserver"];
     }
-    { check = config.services.tomcat.enable;
-      path  = ["nixos" "tomcat"];
+    { check = config.services.telegraf.enable;
+      path  = ["nixos" "telegraf"];
+    }
+    { check = config.services.tiddlywiki.enable;
+      path  = ["nixos" "tiddlywiki"];
+    }
+    { check = true;
+      path  = ["nixos" "timezone"];
+    }
+    { check = config.services.tinydns.enable;
+      path  = ["nixos" "tinydns"];
+    }
+    { check = config.services.tor.enable;
+      path  = ["nixos" "tor"];
     }
     { check = config.services.transmission.enable;
       path  = ["nixos" "transmission"];
     }
+    { check = config.services.trac.enable;
+      path  = ["nixos" "trac"];
+    }
+    { check = config.services.trilium-server.enable;
+      path  = ["nixos" "trilium-server"];
+    }
+    { check = config.services.trezord.enable;
+      path  = ["nixos" "trezord"];
+    }
+    { check = config.services.trickster.enable;
+      path  = ["nixos" "trickster"];
+    }
     { check = config.services.udisks2.enable;
       path  = ["nixos" "udisks2"];
     }
+    { check = config.services.miniupnpd.enable
+           || hasPackage pkgs.miniupnpc_2;
+      path  = ["nixos" "upnp"];
+    }
+    { check = config.services.uwsgi.enable;
+      path  = ["nixos" "uwsgi"];
+    }
     { check = config.services.vault.enable;
       path  = ["nixos" "vault"];
     }
+    { check = config.services.victoriametrics.enable;
+      path  = ["nixos" "victoriametrics"];
+    }
     { check = config.virtualisation.virtualbox.host.enable;
       paths = [
         ["nixos" "virtualbox" "host-usb-permissions"]
@@ -550,13 +1063,26 @@ let
            && config.virtualisation.virtualbox.host.headless;
       path  = ["nixos" "virtualbox" "headless"];
     }
+    { check = config.networking.wireguard.enable;
+      path  = ["nixos" "wireguard"];
+    }
+    { check = with config.networking.wireguard; enable
+           && anyAttrs (i: i.generatePrivateKeyFile) interfaces;
+      path  = ["nixos" "wireguard-generated"];
+    }
     { check = let
-        hasWPSubServiceType = any (y: y.serviceType == "wordpress");
-        hasWPSubService = any (x: hasWPSubServiceType x.extraSubservices);
-        hasWordPress = config.services.httpd.virtualHosts;
-      in config.services.httpd.enable && hasWordPress;
+        isEnabled = config.networking.wireguard.enable;
+        usesNS = iface: iface.socketNamespace != null
+              || iface.interfaceNamespace != null;
+      in isEnabled && anyAttrs usesNS config.networking.wireguard.interfaces;
+      path  = ["nixos" "wireguard-namespaces"];
+    }
+    { check = config.services.wordpress != {};
       path  = ["nixos" "wordpress"];
     }
+    { check = config.services.xandikos.enable;
+      path  = ["nixos" "xandikos"];
+    }
     { check = config.services.xserver.xautolock.enable;
       path  = ["nixos" "xautolock"];
     }
@@ -569,9 +1095,26 @@ let
     { check = config.services.xrdp.enable;
       path  = ["nixos" "xrdp"];
     }
+    { check = config.programs.xss-lock.enable;
+      path  = ["nixos" "xss-lock"];
+    }
     { check = config.programs.yabar.enable;
       path  = ["nixos" "yabar"];
     }
+    { check = config.services.yggdrasil.enable;
+      path  = ["nixos" "yggdrasil"];
+    }
+    { check = elem "zfs" config.boot.supportedFilesystems
+           && !config.boot.zfs.enableUnstable;
+      path  = ["nixos" "zfs" "stable"];
+    }
+    { check = elem "zfs" config.boot.supportedFilesystems
+           && config.boot.zfs.enableUnstable;
+      path  = ["nixos" "zfs" "unstable"];
+    }
+    { check = config.programs.zsh.enable;
+      path  = ["nixos" "zsh-history"];
+    }
     { check = config.services.zookeeper.enable;
       path  = ["nixos" "zookeeper"];
     }