nixos-config/machines/orbi/service-taskchampion.nix

{
  config,
  lib,
  pkgs,
  zerotierInterface,
  ...
}:
{

  networking.firewall.interfaces.wg0.allowedTCPPorts = [
    config.services.taskchampion-sync-server.port
  ];
  networking.firewall.interfaces.wg0.allowedUDPPorts = [
    config.services.taskchampion-sync-server.port
  ];

  services.taskchampion-sync-server = {
    enable = true;
    openFirewall = false;
  };

}