57 lines
1.2 KiB
Nix
57 lines
1.2 KiB
Nix
{ config, ... }:
|
|
let
|
|
repo = config.repo;
|
|
repoHelpers = repo.helpers;
|
|
service = repo.services.radicale;
|
|
in
|
|
{
|
|
repo.services.radicale = {
|
|
domain = "radicale.jelles.net";
|
|
host = "127.0.0.1";
|
|
port = 5232;
|
|
url = "https://radicale.jelles.net/";
|
|
};
|
|
|
|
flake.modules.nixos.radicale =
|
|
{ lib, ... }:
|
|
lib.mkMerge [
|
|
{
|
|
services.radicale = {
|
|
enable = true;
|
|
settings = {
|
|
server.hosts = [ "${service.host}:${toString service.port}" ];
|
|
|
|
auth = {
|
|
type = "htpasswd";
|
|
htpasswd_filename = "/var/lib/radicale/users";
|
|
htpasswd_encryption = "bcrypt";
|
|
};
|
|
|
|
storage.filesystem_folder = "/var/lib/radicale/collections";
|
|
};
|
|
};
|
|
}
|
|
|
|
(repoHelpers.mkCaddyReverseProxy {
|
|
inherit (service)
|
|
domain
|
|
port
|
|
;
|
|
extraHeaders = [
|
|
{
|
|
name = "X-Script-Name";
|
|
value = "/";
|
|
}
|
|
{
|
|
name = "X-Forwarded-For";
|
|
value = "{remote}";
|
|
}
|
|
{
|
|
name = "X-Remote-User";
|
|
value = "{http.auth.user.id}";
|
|
}
|
|
];
|
|
})
|
|
];
|
|
}
|