From 2b4f700d7ec4ba7426119ff2404094a6fd1fe53c Mon Sep 17 00:00:00 2001
From: Ben Sima <ben@bsima.me>
Date: Mon, 6 Nov 2023 11:32:45 -0400
Subject: Add public collection for radicale

This will allow me to create a public calendar to share with people instead of
using my iCloud calendar.
---
 Biz/Cloud/Web.nix | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

(limited to 'Biz/Cloud')

diff --git a/Biz/Cloud/Web.nix b/Biz/Cloud/Web.nix
index 913bded..532c843 100644
--- a/Biz/Cloud/Web.nix
+++ b/Biz/Cloud/Web.nix
@@ -39,6 +39,33 @@ in
 
     radicale = {
       enable = true;
+      rights = {
+        # Allow reading root collection for authenticated users
+        root = {
+          user = ".+";
+          collection = "";
+          permissions = "R";
+        };
+        # Allow reading and writing principal collection (same as username)
+        principal = {
+          user = ".+";
+          collection = "{user}";
+          permissions = "RW";
+        };
+        # Allow reading and writing calendars and address books that are direct
+        # children of the principal collection
+        calendars = {
+          user = ".+";
+          collection = "{user}/[^/]+";
+          permissions = "rw";
+        };
+        # Allow any authenticated user to modify the public collection
+        public = {
+          user = ".*";
+          collection = "public/.*";
+          permissions = "rw";
+        };
+      };
       settings = {
         server = {
           hosts = [
@@ -53,6 +80,7 @@ in
         };
       };
     };
+
     gmnisrv = {
       enable = false;
       listen = "0.0.0.0:${toString ports.gemini} [::]:${toString ports.gemini}";
-- 
cgit v1.2.3