inputs:

{ config, lib, ... }:

{
  services.taskserver = {
    enable = true;
    fqdn = lib.mkDefault "tasks.${config.networking.fqdn}";
    listenHost = config.topology.mainVpn.currentNodeIP;

    organisations.default.users = [ "minijackson" ];
  };

  # TODO: Port is already opened on all interfaces, fix #68839
  networking.firewall.interfaces.${config.topology.mainVpn.interfaceName}.allowedTCPPorts = [
    config.services.taskserver.listenPort
  ];
}