{
  nixos-lib,
  pkgsUnstable,
  nixpkgs-unstable,
  vhackPackages,
  pkgs,
  extraModules,
  nixLib,
  vhack,
  ...
}:
vhack.runTest {
  name = "taskchampion-sync";

  serverDomains = [
    {server = "taskchampion.server";}
  ];

  nodes = let
    taskwarriorPackage = pkgs.taskwarrior3.overrideAttrs (final: prev: {
      cmakeFlags = (prev.cmakeFlags or []) ++ ["-DENABLE_TLS_NATIVE_ROOTS=true"];
    });
  in {
    server = {config, ...}: {
      imports =
        extraModules
        ++ [
          ../../../../modules
        ];

      vhack = {
        persist.enable = true;
        nginx.enable = true;
        taskchampion-sync = {
          enable = true;
          fqdn = "taskchampion.server";
        };
      };
    };

    task_client1 = {config, ...}: {
      environment.systemPackages = [
        taskwarriorPackage
      ];
    };
    task_client2 = {config, ...}: {
      environment.systemPackages = [
        taskwarriorPackage
      ];
    };
  };

  services = [
    {server = "taskchampion-sync-server.service";}
  ];

  testScript = {nodes, ...}: let
    # Generated with uuidgen
    uuid = "bf01376e-04a4-435a-9263-608567531af3";
    password = "nixos-test";

    mkSyncConfig = path:
      pkgs.writeShellScript "setup-config-file" ''
        set -xe

        mkdir --parents "$(dirname "${path}")"
        echo 'sync.server.url=https://taskchampion.server' >> "${path}"
        echo 'sync.server.client_id=${uuid}' >> "${path}"
        echo 'sync.encryption_secret=${password}' >> "${path}"
      '';
  in
    # Python
    ''
      server.wait_for_open_port(443)

      with subtest("Setup task syncing"):
          for task in [task_client1, task_client2]:
            # See man task-sync(5)
            task.succeed("mkdir ~/.task")
            task.succeed("${mkSyncConfig "$HOME/.taskrc"}")

      with subtest("Can create tasks"):
          task_client1.succeed("task add 'First task -- task_client1'")
          task_client2.succeed("task add 'First task -- task_client2'")

      # Wait for the server to acquire the acme certificate
      task_client1.wait_until_succeeds("curl https://taskchampion.server")

      with subtest("Can sync tasks"):
          for task in [task_client1, task_client2]:
            task.succeed("task sync")
          task_client1.succeed("task sync")


      with subtest("Have correct tasks"):
          count1 = task_client1.succeed("task count")
          count2 = task_client2.succeed("task count")

          assert int(count1) == 2, f"We don't have exactly 2 tasks, but {count1}"
          assert count1 == count2, f"The clients don't have the same amount of tasks, client1: {count1}, client2: {count2}"
    '';
}