From 347acf7e6e903772190d0cea9d822909a8c956e7 Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Sat, 7 Sep 2024 10:09:00 +0700
Subject: [PATCH] :construction: working on taskwarrior-webui

It can't use wireguard to access stuff, so we will put it on orbi behind an nginx
---
 machines/chungus/configuration.nix       |  1 +
 machines/chungus/service-taskwarrior.nix | 26 ++++++++++++++++++++++++
 2 files changed, 27 insertions(+)
 create mode 100644 machines/chungus/service-taskwarrior.nix

diff --git a/machines/chungus/configuration.nix b/machines/chungus/configuration.nix
index 2b0f1ec..55c151c 100644
--- a/machines/chungus/configuration.nix
+++ b/machines/chungus/configuration.nix
@@ -48,6 +48,7 @@
     ./service-forgejo.nix
     ./service-paperless.nix
     ./service-s3.nix
+    ./service-taskwarrior.nix
     ./service-vault.nix
 
     ./zerotier-controller.nix
diff --git a/machines/chungus/service-taskwarrior.nix b/machines/chungus/service-taskwarrior.nix
new file mode 100644
index 0000000..31c8812
--- /dev/null
+++ b/machines/chungus/service-taskwarrior.nix
@@ -0,0 +1,26 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+
+  virtualisation.oci-containers = {
+    containers.taskwarrior-webui = {
+      volumes = [
+        "/srv2/taskwarrior/taskrc:/.taskrc"
+        "/srv2/taskwarrior/task:/.task"
+      ];
+      ports = [
+        "8080:80"
+      ];
+      environment.TZ = "Europe/Berlin";
+      image = "dcsunset/taskwarrior-webui:3";
+    };
+  };
+
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 8080 ];
+  networking.firewall.interfaces.wg0.allowedUDPPorts = [ 8080 ];
+
+}