README.md

Here are all the tests you need to test the thing !

• Setting up
• Tests
  • Security
    • SSH Hardening
    • NGINX Hardening
  • Content
  • Behaviour

Setting up

You will need Inspec to run the tests. See the installation guide

Tests

We break up the tests into a few profiles

- security
    - ssh
    - nginx
- content
- behaviour

Security

SSH Hardening

We use the Dev-Sec SSH baseline profile for testing ssh configuration:

inspec exec -t ssh://<username>@<forum_hostname> https://github.com/dev-sec/ssh-baseline

NGINX Hardening

Content

We test the content by expecting a few predefined categories. See content.

Behaviour

We use cucumber to describe various desired features of the service. See cucumber/README for more details.