switch to baikal

hosts/dav/baikal.nix

@@ -0,0 +1,24 @@
+{ ... }:
+
+{
+  imports = [
+    ../../services/nginx.nix
+  ];
+
+  services = {
+    baikal = {
+      enable = true;
+      virtualHost = "dav.${config.networking.domain}";
+    };
+
+    nginx.virtualHosts."dav.${config.networking.domain}" = {
+      default = true;
+      quic = true;
+      kTLS = true;
+      forceSSL = true;
+      enableACME = true;
+      locations."/all.ics".root = "/srv/www/calendar";
+    };
+  };
+}
+

hosts/dav/default.nix

@@ -5,7 +5,8 @@
     ../common.nix
     ../../services/openssh.nix
     ../../services/prometheus-node.nix
-    ./radicale.nix
+    #./radicale.nix
+    ./baikal.nix
   ];
 
   networking = {

hosts/dav/radicale.nix

@@ -42,14 +42,14 @@ in
     radicale = {
       enable = true;
       rights = {
-        root = {
+        readonly = {
-          user = ".*";
+          user = "";
-          collection = "";
+          collection = ".*";
           permissions = "r";
         };
         principal = {
           user = ".*";
-          collection = "{user}/?";
+          collection = "{user}";
           permissions = "rw";
         };
         collections = {