feat (hosts/mystra): taskd

hosts/mystra/default.nix

@@ -4,23 +4,15 @@
     ./hardware-configuration.nix
     ./disk-config.nix
     ../../nixos/server.nix
+    ./nginx.nix
+    ./taskd.nix
   ];
 
-  services.nginx = {
-    enable = true;
-    virtualHosts."henri-saudubray.fr" = {
-      enableACME = true;
-      # forceSSL = true;
-      root = "/var/www/html";
-    };
-  };
-
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
-
-  security.acme = {
-    acceptTerms = true;
-    defaults.email = "henri.saudubray@proton.me";
-  };
+  networking.firewall.allowedTCPPorts = [
+    80 # HTTP (nginx)
+    443 # HTTPS (nginx)
+    53589 # Taskserver
+  ];
 
   networking.hostName = "mystra";
   system.stateVersion = "25.11";