From cd75ff6797386c5924a2f0bbc62eadf1c6e2725d Mon Sep 17 00:00:00 2001
From: Soispha <soispha@vhack.eu>
Date: Sun, 1 Oct 2023 22:07:22 +0200
Subject: feat(system/services/taskserver): Init

This is the server part used in combination with Taskwarrior to regain
control over the unwieldy amount of task, that accumulate over the day.
---
 notes/taskserver.md                     |  7 +++++++
 system/impermanence/default.nix         |  1 +
 system/impermanence/mods/taskserver.nix |  5 +++++
 system/services/default.nix             |  1 +
 system/services/taskserver/default.nix  | 28 ++++++++++++++++++++++++++++
 5 files changed, 42 insertions(+)
 create mode 100644 notes/taskserver.md
 create mode 100644 system/impermanence/mods/taskserver.nix
 create mode 100644 system/services/taskserver/default.nix

diff --git a/notes/taskserver.md b/notes/taskserver.md
new file mode 100644
index 0000000..36aeff0
--- /dev/null
+++ b/notes/taskserver.md
@@ -0,0 +1,7 @@
+# User export
+Use
+```bash
+nixos-taskserver user export my-company alice
+# or via ssh
+ssh $server nixos-taskserver user export my-company alice #| sh
+```
diff --git a/system/impermanence/default.nix b/system/impermanence/default.nix
index b60eb4c..6e977b5 100644
--- a/system/impermanence/default.nix
+++ b/system/impermanence/default.nix
@@ -8,6 +8,7 @@
     ./mods/nix-sync.nix
     ./mods/openssh.nix
     ./mods/postgresql.nix
+    ./mods/taskserver.nix
     ./mods/users.nix
   ];
 
diff --git a/system/impermanence/mods/taskserver.nix b/system/impermanence/mods/taskserver.nix
new file mode 100644
index 0000000..9208aa4
--- /dev/null
+++ b/system/impermanence/mods/taskserver.nix
@@ -0,0 +1,5 @@
+{...}: {
+  environment.persistence."/srv".directories = [
+    "/var/lib/taskserver"
+  ];
+}
diff --git a/system/services/default.nix b/system/services/default.nix
index 9163588..3349b38 100644
--- a/system/services/default.nix
+++ b/system/services/default.nix
@@ -13,5 +13,6 @@
     ./openssh
     ./rust-motd
     ./snapper
+    ./taskserver
   ];
 }
diff --git a/system/services/taskserver/default.nix b/system/services/taskserver/default.nix
new file mode 100644
index 0000000..56255cd
--- /dev/null
+++ b/system/services/taskserver/default.nix
@@ -0,0 +1,28 @@
+{...}: {
+  services.taskserver = {
+    enable = true;
+    pki.auto = {
+      expiration = {
+        server = 365;
+        crl = 365;
+        client = 365;
+        ca = 365;
+      };
+      bits = 4096;
+    };
+    organisations = {
+      vhack = {
+        users = [
+          "soispha"
+        ];
+      };
+      soispha = {
+        users = [
+          "soispha"
+        ];
+      };
+    };
+    openFirewall = true;
+    fqdn = "taskserver.vhack.eu";
+  };
+}
-- 
cgit 1.4.1