nixos-config/machines/orbi/service-taskserver.nix

{
  config,
  lib,
  pkgs,
  zerotierInterface,
  ...
}:
{

  networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.taskchampion-sync-server.port ];
  networking.firewall.interfaces.wg0.allowedUDPPorts = [ config.services.taskchampion-sync-server.port ];

  services.taskchampion-sync-server = {
    enable = true;
    openFirewall = false;
  };

}