github: Add a test of http-only serving.

Author: alexmv

ci/http-only/compose.yaml

@@ -0,0 +1,25 @@
+---
+services:
+  zulip:
+    environment:
+      DISABLE_HTTPS: True
+    networks: [zulip-backend]
+
+  database:
+    networks: [zulip-backend]
+  memcached:
+    networks: [zulip-backend]
+  rabbitmq:
+    networks: [zulip-backend]
+  redis:
+    networks: [zulip-backend]
+
+networks:
+  zulip-backend:
+    driver: bridge
+    ipam:
+      driver: default
+      config:
+        - subnet: 172.28.0.0/16
+          ip_range: 172.28.5.0/24
+          gateway: 172.28.5.254

ci/http-only/env

@@ -0,0 +1,44 @@
+#!/bin/bash
+
+set -eux
+set -o pipefail
+
+url="http://${hostname:?}"
+
+# This is a server error, which describes the need to set LOADBALANCER_IPS
+error_page=$(curl -sSi "$url")
+echo "$error_page" | grep -Ei "HTTP/\S+ 500"
+echo "$error_page" | grep "You have not configured any reverse proxies"
+echo "$error_page" | grep "LOADBALANCER_IPS"
+
+# This is a server error, which notes the reverse proxy exists
+error_page=$(curl -H "X-Forwarded-For: 1.2.3.4" -sSi "$url")
+echo "$error_page" | grep -Ei "HTTP/\S+ 500"
+echo "$error_page" | grep "You have not configured any reverse proxies"
+echo "$error_page" | grep "reverse proxy headers were detected"
+echo "$error_page" | grep "LOADBALANCER_IPS"
+
+# Restart with LOADBALANCER_IPS set
+"${docker[@]:?}" -f ci/http-only/with-loadbalancer-ips.yaml up -d --no-build --force-recreate zulip
+
+# Wait for it to come back up
+instance=$("${docker[@]}" ps -q zulip)
+timeout 300 bash -c \
+    "until docker inspect --format '{{.State.Health.Status}}' '$instance' | grep -q healthy; do sleep 5; done"
+
+# This is a server error, which notes the lack of X-Forwarded-Proto
+error_page=$(curl -H "X-Forwarded-For: 1.2.3.4" -sSi "$url")
+echo "$error_page" | grep -Ei "HTTP/\S+ 500"
+echo "$error_page" | grep "You have configured reverse proxies"
+echo "$error_page" | grep "X-Forwarded-Proto"
+
+# This is a 404 due to no realm existing
+error_page=$(curl -H "X-Forwarded-For: 1.2.3.4" -H "X-Forwarded-Proto: https" -sSi "$url")
+echo "$error_page" | grep -Ei "HTTP/\S+ 404"
+
+"${manage[@]:?}" create_realm 'Testing Realm' [email protected] 'Test Admin' --password very-secret
+
+success=$(curl -H "X-Forwarded-For: 1.2.3.4" -H "X-Forwarded-Proto: https" -sfLSi "$url")
+echo "$success" | grep "Testing Realm"
+
+exit 0

ci/http-only/test.sh

@@ -0,0 +1,7 @@
+---
+services:
+  zulip:
+    environment:
+      # This is the network's gateway address, set in compose.yaml, and the
+      # Docker Desktop IP VM's address (for local testing).
+      LOADBALANCER_IPS: 172.28.5.254,192.168.65.1