feat(shan): host radicale

hosts/shan/default.nix

@@ -141,7 +141,26 @@
       openFirewall = true;
       host = "0.0.0.0";
     };
+
+    radicale = {
+      enable = true;
+      # Documentation at <https://radicale.org/v3.html#configuration>
+      settings = {
+        server = {
+          hosts = [ "0.0.0.0:5232" ];
+        };
+        auth = {
+          type = "htpasswd";
+          htpasswd_filename = "/etc/radicale/users";
+          htpasswd_encryption = "autodetect";
+        };
+        storage = {
+          filesystem_folder = "/var/lib/radicale/collections";
+        };
+      };
+    };
   };
+  networking.firewall.allowedTCPPorts = [ 5232 ];
 
   #  security.acme = {
   #acceptTerms = true;