Taskserver
services.taskserver.allowedClientIDs
A list of regular expressions that are matched against the reported
client id (such as task 2.3.0
).
The values all
or none
have
special meaning. Overridden by any entry in the option
{option}services.taskserver.disallowedClientIDs
.
Type: string or list of string
Default
[ ]
Example
["[Tt]ask [2-9]+"]
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.ciphers
List of GnuTLS ciphers to use. See the GnuTLS documentation about priority strings at https://gnutls.org/manual/html_node/Priority-Strings.html for full details.
Type: null or strings concatenated with ":"
Default
null
Example
"NORMAL:-VERS-SSL3.0"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.config
Configuration options to pass to Taskserver.
The options here are the same as described in
{manpage}taskdrc(5)
, but with one difference:
The server
option is
server.listen
here, because the
server
option would collide with other options
like server.cert
and we would run in a type error
(attribute set versus string).
Nix types like integers or booleans are automatically converted to the right values Taskserver would expect.
Type: attribute set
Example
{client = {cert = "/tmp/debugging.cert";};}
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.confirmation
Determines whether certain commands are confirmed.
Type: boolean
Default
true
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.dataDir
Data directory for Taskserver.
Type: path
Default
"/var/lib/taskserver"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.debug
Logs debugging information.
Type: boolean
Default
false
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.disallowedClientIDs
A list of regular expressions that are matched against the reported
client id (such as task 2.3.0
).
The values all
or none
have
special meaning. Any entry here overrides those in
{option}services.taskserver.allowedClientIDs
.
Type: string or list of string
Default
[ ]
Example
["[Tt]ask [2-9]+"]
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.enable
Whether to enable the Taskwarrior server.
More instructions about NixOS in conjunction with Taskserver can be found in the NixOS manual.
Type: boolean
Default
false
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.extensions
Fully qualified path of the Taskserver extension scripts. Currently there are none.
Type: null or path
Default
null
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.fqdn
The fully qualified domain name of this server, which is also used as the common name in the certificates.
Type: string
Default
"localhost"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.group
Group for Taskserver.
Type: string
Default
"taskd"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.ipLog
Logs the IP addresses of incoming requests.
Type: boolean
Default
false
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.listenHost
The address (IPv4, IPv6 or DNS) to listen on.
Type: string
Default
"localhost"
Example
"::"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.listenPort
Port number of the Taskserver.
Type: signed integer
Default
53589
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.openFirewall
Whether to open the firewall for the specified Taskserver port.
Type: boolean
Default
false
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.organisations
An attribute set where the keys name the organisation and the values
are a set of lists of {option}users
and
{option}groups
.
Type: attribute set of (submodule)
Default
{ }
Example
{myShinyOrganisation = {groups = ["staff""outsiders"];users = ["alice""bob"];};yetAnotherOrganisation = {users = ["foo""bar"];};}
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.organisations.<name>.groups
A list of group names that belong to the organization.
Type: list of string
Default
[ ]
Example
["workers""slackers"]
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.organisations.<name>.users
A list of user names that belong to the organization.
Type: list of string
Default
[ ]
Example
["alice""bob"]
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.auto.bits
The bit size for generated keys.
::: {.note}
This option is for the automatically handled CA and will be ignored if any
of the {option}services.taskserver.pki.manual.*
options are set.
:::
Type: signed integer
Default
4096
Example
2048
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.auto.expiration.ca
The expiration time of the CA certificate in days or null
for no
expiration time.
::: {.note}
This option is for the automatically handled CA and will be ignored if any
of the {option}services.taskserver.pki.manual.*
options are set.
:::
Type: null or signed integer
Default
null
Example
365
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.auto.expiration.client
The expiration time of client certificates in days or null
for no
expiration time.
::: {.note}
This option is for the automatically handled CA and will be ignored if any
of the {option}services.taskserver.pki.manual.*
options are set.
:::
Type: null or signed integer
Default
null
Example
365
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.auto.expiration.crl
The expiration time of the certificate revocation list (CRL) in days or null
for no
expiration time.
::: {.note}
This option is for the automatically handled CA and will be ignored if any
of the {option}services.taskserver.pki.manual.*
options are set.
:::
Type: null or signed integer
Default
null
Example
365
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.auto.expiration.server
The expiration time of the server certificate in days or null
for no
expiration time.
::: {.note}
This option is for the automatically handled CA and will be ignored if any
of the {option}services.taskserver.pki.manual.*
options are set.
:::
Type: null or signed integer
Default
null
Example
365
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.manual.ca.cert
Fully qualified path to the CA certificate.
::: {.note} Setting this option will prevent automatic CA creation and handling. :::
Type: null or path
Default
null
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.manual.server.cert
Fully qualified path to the server certificate.
::: {.note} Setting this option will prevent automatic CA creation and handling. :::
Type: null or path
Default
null
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.manual.server.crl
Fully qualified path to the server certificate revocation list.
::: {.note} Setting this option will prevent automatic CA creation and handling. :::
Type: null or path
Default
null
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.pki.manual.server.key
Fully qualified path to the server key.
::: {.note} Setting this option will prevent automatic CA creation and handling. :::
Type: null or path
Default
null
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.queueSize
Size of the connection backlog, see {manpage}listen(2)
.
Type: signed integer
Default
10
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.requestLimit
Size limit of incoming requests, in bytes.
Type: signed integer
Default
1048576
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.trust
Determines how client certificates are validated.
The value allow all
performs no client
certificate validation. This is not recommended. The value
strict
causes the client certificate to be
validated against a CA.
Type: one of "allow all", "strict"
Default
"strict"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver
services.taskserver.user
User for Taskserver.
Type: string
Default
"taskd"
Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver