{ pkgs, ... }:

{
  # Task list maintained by agent@ (see agent-codex.nix's task-edit
  # capability) -- tailnet-only, wired via routes-internal.nix's mkRoute
  # (not an inline Traefik block like website.nix/launcher.nix, since
  # those are public).
  systemd.services.tasks = {
    description = "Task list, edited via chat with agent@bot.0ff.space (tailnet-only)";
    wantedBy = [ "multi-user.target" ];
    before = [ "traefik.service" ];
    serviceConfig = {
      User = "drone";
      Group = "users";
      ExecStart = "${pkgs.static-web-server}/bin/static-web-server --host 127.0.0.1 --port 8006 --root /var/www/tasks";
      Restart = "always";
      RestartSec = "5s";
    };
  };
}