Skip to content

Taskserver

services.taskserver.allowedClientIDs

A list of regular expressions that are matched against the reported client id (such as task 2.3.0).

The values all or none have special meaning. Overridden by any entry in the option {option}services.taskserver.disallowedClientIDs.

Type: string or list of string

Default

[ ]

Example

["[Tt]ask [2-9]+"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.ciphers

List of GnuTLS ciphers to use. See the GnuTLS documentation about priority strings at https://gnutls.org/manual/html_node/Priority-Strings.html for full details.

Type: null or strings concatenated with ":"

Default

null

Example

"NORMAL:-VERS-SSL3.0"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.config

Configuration options to pass to Taskserver.

The options here are the same as described in {manpage}taskdrc(5), but with one difference:

The server option is server.listen here, because the server option would collide with other options like server.cert and we would run in a type error (attribute set versus string).

Nix types like integers or booleans are automatically converted to the right values Taskserver would expect.

Type: attribute set

Example

{client = {cert = "/tmp/debugging.cert";};}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.confirmation

Determines whether certain commands are confirmed.

Type: boolean

Default

true

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.dataDir

Data directory for Taskserver. Type: path

Default

"/var/lib/taskserver"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.debug

Logs debugging information.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.disallowedClientIDs

A list of regular expressions that are matched against the reported client id (such as task 2.3.0).

The values all or none have special meaning. Any entry here overrides those in {option}services.taskserver.allowedClientIDs.

Type: string or list of string

Default

[ ]

Example

["[Tt]ask [2-9]+"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.enable

Whether to enable the Taskwarrior server.

More instructions about NixOS in conjunction with Taskserver can be found in the NixOS manual.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.extensions

Fully qualified path of the Taskserver extension scripts. Currently there are none.

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.fqdn

The fully qualified domain name of this server, which is also used as the common name in the certificates.

Type: string

Default

"localhost"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.group

Group for Taskserver. Type: string

Default

"taskd"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.ipLog

Logs the IP addresses of incoming requests.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.listenHost

The address (IPv4, IPv6 or DNS) to listen on.

Type: string

Default

"localhost"

Example

"::"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.listenPort

Port number of the Taskserver.

Type: signed integer

Default

53589

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.openFirewall

Whether to open the firewall for the specified Taskserver port.

Type: boolean

Default

false

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.organisations

An attribute set where the keys name the organisation and the values are a set of lists of {option}users and {option}groups.

Type: attribute set of (submodule)

Default

{ }

Example

{myShinyOrganisation = {groups = ["staff""outsiders"];users = ["alice""bob"];};yetAnotherOrganisation = {users = ["foo""bar"];};}

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.organisations.<name>.groups

A list of group names that belong to the organization.

Type: list of string

Default

[ ]

Example

["workers""slackers"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.organisations.<name>.users

A list of user names that belong to the organization.

Type: list of string

Default

[ ]

Example

["alice""bob"]

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.auto.bits

The bit size for generated keys.

::: {.note} This option is for the automatically handled CA and will be ignored if any of the {option}services.taskserver.pki.manual.* options are set. :::

Type: signed integer

Default

4096

Example

2048

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.auto.expiration.ca

The expiration time of the CA certificate in days or null for no expiration time.

::: {.note} This option is for the automatically handled CA and will be ignored if any of the {option}services.taskserver.pki.manual.* options are set. :::

Type: null or signed integer

Default

null

Example

365

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.auto.expiration.client

The expiration time of client certificates in days or null for no expiration time.

::: {.note} This option is for the automatically handled CA and will be ignored if any of the {option}services.taskserver.pki.manual.* options are set. :::

Type: null or signed integer

Default

null

Example

365

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.auto.expiration.crl

The expiration time of the certificate revocation list (CRL) in days or null for no expiration time.

::: {.note} This option is for the automatically handled CA and will be ignored if any of the {option}services.taskserver.pki.manual.* options are set. :::

Type: null or signed integer

Default

null

Example

365

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.auto.expiration.server

The expiration time of the server certificate in days or null for no expiration time.

::: {.note} This option is for the automatically handled CA and will be ignored if any of the {option}services.taskserver.pki.manual.* options are set. :::

Type: null or signed integer

Default

null

Example

365

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.manual.ca.cert

Fully qualified path to the CA certificate.

::: {.note} Setting this option will prevent automatic CA creation and handling. :::

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.manual.server.cert

Fully qualified path to the server certificate.

::: {.note} Setting this option will prevent automatic CA creation and handling. :::

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.manual.server.crl

Fully qualified path to the server certificate revocation list.

::: {.note} Setting this option will prevent automatic CA creation and handling. :::

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.pki.manual.server.key

Fully qualified path to the server key.

::: {.note} Setting this option will prevent automatic CA creation and handling. :::

Type: null or path

Default

null

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.queueSize

Size of the connection backlog, see {manpage}listen(2).

Type: signed integer

Default

10

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.requestLimit

Size limit of incoming requests, in bytes.

Type: signed integer

Default

1048576

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.trust

Determines how client certificates are validated.

The value allow all performs no client certificate validation. This is not recommended. The value strict causes the client certificate to be validated against a CA.

Type: one of "allow all", "strict"

Default

"strict"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver

services.taskserver.user

User for Taskserver. Type: string

Default

"taskd"

Declared by: https://github.com/nixos/nixpkgs/blob/master/nixos/modules/services/misc/taskserver