2 files changed, 21 insertions, 0 deletions

diff --git a/flake.nix b/flake.nix
index b7aefc0..dd96e4b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -86,6 +86,7 @@
         radicale = (import ./usecases/server/radicale.nix inputs);
         shiori = (import ./usecases/server/shiori.nix inputs);
         smartd = (import ./usecases/server/smartd.nix inputs);
+        taskserver = (import ./usecases/server/taskserver.nix inputs);
         zfs = (import ./usecases/server/zfs.nix inputs);
       };
 
@@ -186,6 +187,7 @@
               self.nixosModules.usecases.server.nginx
               self.nixosModules.usecases.server.radicale
               self.nixosModules.usecases.server.shiori
+              self.nixosModules.usecases.server.taskserver
               self.nixosModules.usecases.server.zfs
 
               ({ modulesPath, ... }: {
diff --git a/usecases/server/taskserver.nix b/usecases/server/taskserver.nix
new file mode 100644
index 0000000..e459e5c
--- /dev/null
+++ b/usecases/server/taskserver.nix
@@ -0,0 +1,19 @@
+inputs:
+
+{ config, ... }:
+
+{
+  services.taskserver = {
+    enable = true;
+    # TODO: for NixOS 21.05
+    #fqdn = "tasks.${config.networking.fqdn}";
+    listenHost = config.topology.mainVpn.currentNodeIP;
+
+    organisations.default.users = [ "minijackson" ];
+  };
+
+  # TODO: Port is already opened on all interfaces, fix #68839
+  networking.firewall.interfaces.${config.topology.mainVpn.interfaceName}.allowedTCPPorts = [
+    config.services.taskserver.listenPort
+  ];
+}