{ ... }:
let
  port = "5232";
in
{
  services.xandikos = {
    inherit port;
    enable = true;
    routePrefix = "/cal";
    extraOptions = [ "--defaults" ];
  };
  services.caddy.virtualHosts."cal.xenia.me.uk".extraConfig = ''
    basicauth {
      pixelifytica $2a$14$AwYqa81IWL8lU7B5SrQhlOILZj4VqCgcIn9cte8nytQIP/WhfJoSG
    }
    respond /.well-known/caldav http://localhost:${port}/user/calendars
    respond /.well-known/carddav http://localhost:${port}/user/contacts
    reverse_proxy http://localhost:${port}
  '';
}