Install dav server on web-2

hosts/web-2/configuration.nix

@@ -8,6 +8,7 @@
       ./bubblesort.nix
       ./ip.nix
       ./meow.nix
+      ./radicale.nix
       ./znc.nix
     ];
 
@@ -32,7 +33,6 @@
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
-  };
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 

hosts/web-2/radicale.nix

@@ -0,0 +1,32 @@
+{ ... }:
+
+{
+  services.radicale = {
+    enable = true;
+    config = ''
+    [server]
+    hosts = 127.0.0.1:61865
+
+    [auth]
+    type = htpasswd
+    htpasswd_filename = /var/src/secrets/radicale/htpasswd
+    htpasswd_encryption = bcrypt
+
+    [storage]
+    filesystem_folder = /var/lib/radicale/collections
+    '';
+  };
+
+  services.nginx.virtualHosts."dav.clerie.de" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:61865";
+      extraConfig = ''
+        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header  Host $host;
+        proxy_pass_header Authorization;
+      '';
+    };
+  };
+}