saklas: enable radicale

1 files changed, 24 insertions, 0 deletions

diff --git a/hosts/saklas/default.nix b/hosts/saklas/default.nix
index d83dc8e..170e1be 100644
--- a/hosts/saklas/default.nix
+++ b/hosts/saklas/default.nix
@@ -126,6 +126,17 @@
           };
         };
 
+        "radicale.vineetk.net" = {
+          useACMEHost = "vineetk.net";
+          forceSSL = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:5232/";
+            extraConfig = ''
+                proxy_pass_header Authorization;
+            '';
+          };
+        };
+
         "vinbiz.ca" = {
           enableACME = true;
           forceSSL = true;
@@ -146,6 +157,19 @@
       };
     };
 
+    # CalDAV and CardDAV
+    radicale = {
+      enable = true;
+      settings = {
+        server.hosts = [ "127.0.0.1:5232" ];
+        auth = {
+          type = "htpasswd";
+          htpasswd_filename = "/etc/radicale/users";
+          htpasswd_encryption = "bcrypt";
+        };
+      };
+    };
+
     # SSH
     # first use tarpit
     endlessh = {