{...}: let
  port = 5232;
in {
  services.radicale = {
    enable = true;
    settings = {
      server = {
        hosts = ["0.0.0.0:${port}"];
      };
      auth = {
        type = "htpasswd";
        htpasswd_filename = "/etc/radicale/users";
        delay = 1;
      };
    };
    # rights = {};
  };
  services.caddy.virtualHosts."cal.xenia.me.uk".extraConfig = ''
    reverse_proxy http://localhost:${port}
  '';
}