From cd75ff6797386c5924a2f0bbc62eadf1c6e2725d Mon Sep 17 00:00:00 2001
From: Soispha <soispha@vhack.eu>
Date: Sun, 1 Oct 2023 22:07:22 +0200
Subject: feat(system/services/taskserver): Init

This is the server part used in combination with Taskwarrior to regain
control over the unwieldy amount of task, that accumulate over the day.
---
 system/services/taskserver/default.nix | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 system/services/taskserver/default.nix

(limited to 'system/services/taskserver/default.nix')

diff --git a/system/services/taskserver/default.nix b/system/services/taskserver/default.nix
new file mode 100644
index 0000000..56255cd
--- /dev/null
+++ b/system/services/taskserver/default.nix
@@ -0,0 +1,28 @@
+{...}: {
+  services.taskserver = {
+    enable = true;
+    pki.auto = {
+      expiration = {
+        server = 365;
+        crl = 365;
+        client = 365;
+        ca = 365;
+      };
+      bits = 4096;
+    };
+    organisations = {
+      vhack = {
+        users = [
+          "soispha"
+        ];
+      };
+      soispha = {
+        users = [
+          "soispha"
+        ];
+      };
+    };
+    openFirewall = true;
+    fqdn = "taskserver.vhack.eu";
+  };
+}
-- 
cgit 1.4.1


From 18624e4434c5ec379784e59a2f8054296d4c6837 Mon Sep 17 00:00:00 2001
From: Soispha <soispha@vhack.eu>
Date: Sun, 1 Oct 2023 22:55:33 +0200
Subject: fix(system/services/taskserver): Specify domain to listen on

---
 system/services/taskserver/default.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'system/services/taskserver/default.nix')

diff --git a/system/services/taskserver/default.nix b/system/services/taskserver/default.nix
index 56255cd..6a0aba6 100644
--- a/system/services/taskserver/default.nix
+++ b/system/services/taskserver/default.nix
@@ -24,5 +24,6 @@
     };
     openFirewall = true;
     fqdn = "taskserver.vhack.eu";
+    listenHost = "taskserver.vhack.eu";
   };
 }
-- 
cgit 1.4.1


From 17f6a00debfb2a68a691936d3f1c5a4b84edef19 Mon Sep 17 00:00:00 2001
From: Soispha <soispha@vhack.eu>
Date: Mon, 2 Oct 2023 18:21:36 +0200
Subject: fix(system/services/taskserver): Use strict certificate validation

---
 system/services/taskserver/default.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'system/services/taskserver/default.nix')

diff --git a/system/services/taskserver/default.nix b/system/services/taskserver/default.nix
index 6a0aba6..517da5d 100644
--- a/system/services/taskserver/default.nix
+++ b/system/services/taskserver/default.nix
@@ -22,6 +22,7 @@
         ];
       };
     };
+    trust = "strict";
     openFirewall = true;
     fqdn = "taskserver.vhack.eu";
     listenHost = "taskserver.vhack.eu";
-- 
cgit 1.4.1