add basic radicale config

hosts/radicale/default.nix

@@ -3,6 +3,9 @@ let
   mac = "02:00:00:00:00:02";
 in
 {
+  imports = [
+    ./radicale.nix
+  ];
   sops.defaultSopsFile = ./secrets.yaml;
   sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
 

hosts/radicale/radicale.nix

@@ -0,0 +1,18 @@
+{ ... }:
+{
+  services.radicale = {
+    enable = true;
+    settings = {
+      server = {
+        hosts = [ "0.0.0.0:5232" "[::]:5232" ];
+        ssl = "False";
+      };
+      auth = {
+        type = "http_x_remote_user";
+      };
+      rights = {
+        type = "owner_only";
+      };
+    };
+  };
+}