From 15461dcbdbb03e983bb8a5d9845140b51d921464 Mon Sep 17 00:00:00 2001
From: Ahwx <ahwx@ahwx.org>
Date: Thu, 4 Jun 2026 03:58:13 +0200
Subject: [PATCH] fix: update radicale config so more calendars support it
 (wip)

---
 modules/services/radicale.nix | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/modules/services/radicale.nix b/modules/services/radicale.nix
index d601bca..627d1a6 100644
--- a/modules/services/radicale.nix
+++ b/modules/services/radicale.nix
@@ -21,7 +21,18 @@
         forceSSL = true;
         sslCertificate = "/var/lib/acme/liv.town/cert.pem";
         sslCertificateKey = "/var/lib/acme/liv.town/key.pem";
-        # locations."/radicale/" = {
+        locations."/radicale/" = {
+          proxyPass = "http://127.0.0.1:5232/";
+          proxyWebsockets = true;
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-Proto https;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Host $remote_addr;
+            proxy_pass_header Authorization;
+          '';
+        };
         locations."/" = {
           proxyPass = "http://127.0.0.1:5232/";
           proxyWebsockets = true;
@@ -32,6 +43,11 @@
             send_timeout                300;
           '';
         };
+        locations."^/.well-known/carddav".return = "301 /radicale/";
+        locations."^/.well-known/caldav".return = "301 /radicale/";
+        locations."^/remote.php/webdav".return = "301 /radicale/";
+        locations."^/remote.php/caldav".return = "301 /radicale/caldav/";
+        locations."^/remote.php/carddav".return = "301 /radicale/carddav/";
       };
     };
   };