nixos/system/services/radicale.nix

{ ... }:
let
  port = "5232";
in
{
  services.radicale = {
    enable = true;
    settings = {
      server = {
        hosts = [ "0.0.0.0:${port}" ];
      };
      auth = {
        type = "htpasswd";
        htpasswd_filename = "/etc/radicale/users";
        delay = 1;
      };
    };
    # rights = {};
  };
  services.caddy.virtualHosts."cal.xenia.me.uk".extraConfig = ''
    reverse_proxy http://localhost:${port}
  '';
}