nixos-config/machines/orbi/service-taskserver.nix

{
  config,
  lib,
  pkgs,
  ...
}:
{

  # todo: backup taskserver via zfs syncoid
  services.taskserver = {
    enable = true;
    fqdn = "taskd.ingolf-wagner.de";
    listenHost = "0.0.0.0";
    requestLimit = 104857600;
    trust = "strict";
    dataDir = "/var/lib/taskserver";
    organisations."1337".users = [
      "palo"
      "beta"
    ];
    ciphers = "SECURE256";
  };

  networking.firewall.allowedTCPPorts = [ config.services.taskserver.listenPort ];
  networking.firewall.allowedUDPPorts = [ config.services.taskserver.listenPort ];

}