From 0c0941eeab73a8f1f5e4f1a1651a9b33c9927f62 Mon Sep 17 00:00:00 2001
From: Minijackson <minijackson@riseup.net>
Date: Fri, 28 May 2021 20:20:42 +0200
Subject: radicale: init

---
 flake.nix                    |  2 ++
 usecases/server/radicale.nix | 18 ++++++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 usecases/server/radicale.nix

diff --git a/flake.nix b/flake.nix
index a918cd0..5a04fb3 100644
--- a/flake.nix
+++ b/flake.nix
@@ -77,6 +77,7 @@
         audit = (import ./usecases/server/audit.nix inputs);
         fail2ban = (import ./usecases/server/fail2ban.nix inputs);
         monitoringTarget = (import ./usecases/server/monitoring-target.nix inputs);
+        radicale = (import ./usecases/server/radicale.nix inputs);
         smartd = (import ./usecases/server/smartd.nix inputs);
         zfs = (import ./usecases/server/zfs.nix inputs);
       };
@@ -168,6 +169,7 @@
             self.nixosModules.test
             self.nixosModules.profiles.server
             self.nixosModules.usecases.server.ankisyncd
+            self.nixosModules.usecases.server.radicale
             self.nixosModules.usecases.server.zfs
 
             {
diff --git a/usecases/server/radicale.nix b/usecases/server/radicale.nix
new file mode 100644
index 0000000..a998643
--- /dev/null
+++ b/usecases/server/radicale.nix
@@ -0,0 +1,18 @@
+inputs:
+
+{ config, ... }:
+
+{
+  # TODO: use RFC42 settings for NixOS 21.05
+  services.radicale = {
+    enable = true;
+    config = ''
+      [server]
+      hosts = ${config.topology.mainVpn.currentNodeIP}:5232
+    '';
+  };
+
+  networking.firewall.interfaces.${config.topology.mainVpn.interfaceName}.allowedTCPPorts = [
+    5232
+  ];
+}
-- 
cgit v1.2.3