#for ssl self test
version: '2.2'
services:

  badssl_test:
    image: "badssl:ssl-self-test"
    container_name: "badssl_ssl_self_test"
    tty: true
    privileged: true
    networks:
      vlan_ssl_net:
        ipv4_address: 192.168.253.130
        ipv6_address: fd00:a1bf:2c3d:ef5a:1e2f:3d4c:56ab:1010
      bridge_net:
        ipv4_address: 172.31.254.2
    volumes:
     - /root/.badssl_self_test_cert_dict:/badssl.com/unittest_certs
     - /etc/localtime:/etc/localtime:ro
    command: >
      bash -c "ifconfig eth0 hw ether 02:42:c0:a8:fd:82
      arp -i eth0 -s 192.168.253.3 02:42:C0:A8:FD:03 
      make clean-certs 
      && make certs-test
      && make inside-docker 
      && cp -r /badssl.com/certs /badssl.com/unittest_certs
      && nginx
      && tail -f /dev/null"

  wpr_test:
    image: "golang:wpr-alpine"
    container_name: "wpr_ssl_self_test"
    tty: true
    privileged: true
    networks:
      vlan_ssl_net:
        ipv4_address: 192.168.253.131
        ipv6_address: fd00:a1bf:2c3d:ef5a:1e2f:3d4c:56ab:1011
      bridge_net:
        ipv4_address: 172.31.254.3
    volumes:
     - /root/.go_wpr_test:/root/go_wpr_test
     - /etc/localtime:/etc/localtime:ro
    command: 
      - /bin/sh
      - -c
      - |
        ifconfig eth0 hw ether 02:42:C0:A8:FD:83
        arp -i eth0 -s 192.168.253.3 02:42:C0:A8:FD:03
        /root/wpr/wpr replay --http_port=80 --https_port=443 --host=0.0.0.0 --quiet_mode /root/wpr/archive.wprgo & 
        tail -f /dev/null
        
  ssl_unittest:
    image: "python:unittest-alpine"
    container_name: "unittest_ssl_self_test"
    depends_on: 
      - badssl_test
      - wpr_test
    tty: true
    privileged: true
    networks:
      vlan_unittest_net:
        ipv4_address: 192.168.253.3
        ipv6_address: fd00:a1bf:2c3d:ef5b:6e7f:8d9c:abfe:1012
      bridge_net:
        ipv4_address: 172.31.254.4
    volumes:
     - /root/.badssl_self_test_cert_dict:/root/cafile_dict
     - /root/.result_self_test:/root/result_self_test
     - /etc/localtime:/etc/localtime:ro
    command: 
      - /bin/sh
      - -c
      - |
        /root/unittest/wait-for 172.31.254.2:443 -t 60 -- echo "badssl is up"
        /root/unittest/wait-for 172.31.254.3:443 -t 60 -- echo "wpr is up"
        ifconfig eth0 hw ether 02:42:C0:A8:FD:03
        arp -i eth0 -s 192.168.253.130 02:42:c0:a8:fd:82
        arp -i eth0 -s 192.168.253.131 02:42:C0:A8:FD:83
        cp -rf /root/cafile_dict/certs/sets/current/gen/crt/ca-root.crt /usr/local/share/ca-certificates
        update-ca-certificates
        cat /root/unittest/badssl.test.hosts >> /etc/hosts
        python /root/unittest/unittest_self.py
        tail -f /dev/null



networks: 
  bridge_net:
    name: bridge_ssl_self_test_net
    driver: bridge
    ipam:
      config:
        - subnet: 172.31.254.0/24
          gateway: 172.31.254.1


  vlan_ssl_net: 
    name: vlan_ssl_self_test_net
    driver: macvlan
    enable_ipv6: true
    driver_opts: 
      parent: enp1s1
    ipam: 
      config: 
        - subnet: 192.168.253.0/24
          ip_range: 192.168.253.128/25  
          gateway: 192.168.253.129
        - subnet: fd00:a1bf:2c3d:ef5a::/63
          ip_range: fd00:a1bf:2c3d:ef5a::/64
          gateway: fd00:a1bf:2c3d:ef5a::1010

  vlan_unittest_net: 
    name: vlan_unittest_self_test_net
    driver: macvlan
    enable_ipv6: true
    driver_opts:
      parent: ens1f1
    ipam:
      config:
        - subnet: 192.168.253.0/24
          ip_range: 192.168.253.0/25
          gateway: 192.168.253.1
        - subnet: fd00:a1bf:2c3d:ef5a::/63
          ip_range: fd00:a1bf:2c3d:ef5b::/64
          gateway: fd00:a1bf:2c3d:ef5a::1011