feat: install radicale for caldav and carddav support

modules/nixos/bundles/server.nix

@@ -19,6 +19,7 @@
     "prowlarr"
     "qbittorrent"
     "radarr"
+    "radicale"
     "sonarr"
     "syncthing"
     "vaultwarden"

modules/nixos/features/homepage-dashboard.nix

@@ -65,6 +65,13 @@ in
                 "href" = "https://ntfy-sh.fi33.buzz/";
               };
             }
+            {
+              "Radicale" = {
+                "description" = "CalDAV/CardDAV service";
+                "icon" = "radicale.svg";
+                "href" = "https://radicale.fi33.buzz";
+              };
+            }
             {
               "Syncthing" = {
                 "description" = "Decentralised file synchronisation";

modules/nixos/features/radicale.nix

@@ -0,0 +1,42 @@
+{
+  config,
+  ...
+}:
+let
+  port = "5003";
+in
+{
+  services = {
+    radicale = {
+      enable = true;
+      settings = {
+        server = {
+          hosts = [
+            "0.0.0.0:${port}"
+            "[::]:${port}"
+          ];
+        };
+        auth = {
+          type = "htpasswd";
+          htpasswd_filename = config.age.secrets.radicale.path;
+          htpasswd_encryption = "plain";
+        };
+        storage = {
+          filesystem_folder = "/srv/radicale";
+        };
+      };
+    };
+
+    nginx.virtualHosts."radicale.fi33.buzz" = {
+      forceSSL = true;
+      useACMEHost = "fi33.buzz";
+      locations."/".proxyPass = "http://localhost:${port}";
+    };
+  };
+
+  # secrets
+  age.secrets."radicale" = {
+    file = ../../../secrets/radicale.age;
+    owner = "radicale";
+  };
+}