{ inputs, pkgs, system }:
let
  inherit (pkgs) nixosTest;
in
{
  keycloak = nixosTest {
    name = "keycloak";
    nodes.machine.services.keycloak = {
      enable = true;
      package = pkgs.keycloak.override { jre = inputs.self.packages.${system}.jre17_standard; };
      database.passwordFile = builtins.toFile "keycloak-test-password" "kcnixostest1234";
      settings = {
        proxy = "edge";
        hostname = "keycloak.local";
      };
    };
    testScript = ''
      machine.wait_for_unit("keycloak.service")
      machine.wait_for_open_port("80")
      machine.succeed("curl --fail http://127.0.0.1:80")
    '';
  };
}