# NixOps configuration for the hosts running a Taskwarrior server (taskd)
{
  config,
  pkgs,
  lib,
  ...
}: {
  services.taskserver = {
    enable = true; # Enable Taskwarrior server
    fqdn = "task.mcwhirter.io"; # Server's public domain name
    listenHost = "task.mcwhirter.io"; # Sets listening IP & opens firewall
    openFirewall = true;
    organisations = {
      teaghlach = {
        groups = ["teaghlach"];
        users = ["craige" "fiona"];
      };
      sgioba = {
        groups = ["sgioba"];
        users = ["craige"];
      };
      obair = {
        groups = ["obair"];
        users = ["craige" "disasm"];
      };
    };
    pki.auto.expiration = {
      ca = 365;
      client = 365;
      server = 365;
    };
  };
}