Radicale rights to allow publicly readable calendars

Author: joinemm

hosts/oxygen/default.nix

@@ -201,6 +201,31 @@ in
         filesystem_folder = "/var/lib/radicale/collections";
       };
     };
+    rights = {
+      root = {
+        user = ".+";
+        collection = "";
+        permissions = "R";
+      };
+
+      principal = {
+        user = ".+";
+        collection = "{user}";
+        permissions = "RW";
+      };
+
+      calendars = {
+        user = ".+";
+        collection = "{user}/[^/]+";
+        permissions = "rw";
+      };
+
+      public = {
+        user = ".*";
+        collection = "public/[^/]+";
+        permissions = "r";
+      };
+    };
   };
 
   services.nginx.virtualHosts =

hosts/oxygen/secrets.yaml

@@ -5,7 +5,7 @@ spotify_client_secret: ENC[AES256_GCM,data:3RRclynDpCFp7212CdI4orMMjLIZBxfxYyizr
 spotify_htpasswd: ENC[AES256_GCM,data:OO0D/IFXMLHQUQKNTO8yWxDR6zkRMshGEq1dlEZrdTKuOXfJYMUBbNMjtQ==,iv:iRQn/9g46HrhlwP6lWr67pikxEfxgKe/qr2U6PS+cBQ=,tag:vV88Jv4tLxG5Ur98gslkhA==,type:str]
 attic_env: ENC[AES256_GCM,data:8NgDhU7SgI5d4h9H+pueU8/9qAN+Xl1bTt2oUZzM/nizI4R7g9cqoXvLG/uM3k3xK2Zcq8VIgMPHdb9UCiIdx+n3ojaM6KOL7wXQDhGGDvi+yTMbkjASuYQKDcZNXY3kY7Ms4IknhJ+xhNrqx88HlfuYn1HLOOcJWSVYky24USsWVB178uQwNN9vg3xinFKRYSMlWQ1ZiMSeLTPK13MBJBDcW4U2zvhDrDWUeg/X4kDTibXazMppB+3dW6ax69vpquoCFV2k1yBjIe2VwRoL1n2KRwvzn6AVjeygb0a0rusp3tYOJ2qGqw==,iv:AjpGbB+iktxWlg5Y1bvrqm3jgmElsWZw832VrvLQGCw=,tag:VxEwBilBetaLTvVlyRgsPQ==,type:str]
 #ENC[AES256_GCM,data:ZiE2v4x86fsiFihMmQ4TmJwCNnEhjuus12lbhuwR/h9ed8XJ,iv:A2Vtl6KiNBtJDtEGTojU21YUfdRglppQGHNoaKRvb78=,tag:iPYbzY/ZXUyvHKxXvfjKEw==,type:comment]
-radicale_auth: ENC[AES256_GCM,data:2IYiHdcpQ/hAUa7e+4U+XSO7KFAuysOl7AEb6ZOlqPwRThuIg3+kIuBaY/dlHDtFC/BQhDbgsn/fO07LjSzo/SpHvIsiAreUXqzDB6HNKMi5jJsUcVDzU1OQgz91bu16dxsATf2i7iUWN1ReVi4qXY8=,iv:Wjlkkt24Ze5beTOoXEykMqYHKAISV4e+4VQiC9oYQSY=,tag:Qru8v0IVJUxg4v8p9uuGkw==,type:str]
+radicale_auth: ENC[AES256_GCM,data:Cu+jvdA/HLpc+B4B0XATYKVwD0CiovBTd1mG3NZKs8QYqLJYiYHmeErflaNwUJI1PdWDHN/i1iFRpXF/xgwvQzNDG2beDHKctxXXE4VtHp7vN8ePgYZztNiO0Mkc6I3/ehQQd6aVvHmANzKeRZ2tCDwFnJ/JKitWs7xPl+GkGrrTwk4CGmYaerSlZWSFqN0fYGwFcXImXPsSFjFp5F0Gj2mEuW8RzKxlmjH7EZOU3tCQhpM1FSHacuC6YtPcqUv4ENhpHe39IEtM6C8pulwEuehUK6y3cETaJ5KxwBzCeYIum4BR,iv:AFvv+IVSoFlZjiUODOFf0kKRTP1wOBYSqSLvaaqM9Ck=,tag:9REneymN4bZsWnOx4gPgpA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -21,8 +21,8 @@ sops:
             b3M2VGh0UUJZL2pwcWtkS0dPOGgzNk0Ki2y6WzKFBUwzmUZrsfDg7tfosevZnwry
             9TLHdoYebCeCfs3+l6WqRYqLYvECISeiK5cewxPuPps0/FdS0uM05g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-06T13:44:52Z"
-    mac: ENC[AES256_GCM,data:0O2k+CJbkAAbW+Ty4pG9FzwVzkezeMzcGOxtHgaSF0fGNgbQRkwrbR5raKgFKEz0JL9S/GNQeMTwFyZ4pYRGGyvDxFRjjyVTRq2KMqE+AdPzThOmHy78/t9mlw+1VL2v4fGMzJRnPleX8TiJ/sIbo6I8vPYOfqG6GAHMN1krbuQ=,iv:lxtyKY3VDrV77ssFuGjO34yw/zCtb74O/p2Cn8ed3vU=,tag:AtSEL7/8mHu/uyFEG20qsw==,type:str]
+    lastmodified: "2025-04-14T12:15:48Z"
+    mac: ENC[AES256_GCM,data:mt3+uGEplN3Cj6NdtC6HGbuUV7Qsp2Cdisdr0SF+95Np0ttX9vknsBu41PxK1PK55jB/UHMW+PJSS/u+vZ+YdEP9B9Im809UxnGPx00JzxbDDgxXHu5nuYn320b5kk26qf7JexZBDZzBbaKvOK/C0/GvLJl5HUKL6g1KfIMoZp4=,iv:6agGaTBUnE9ktAYIL0PLAJiEUCyIWrEJo1gvWYPi1iA=,tag:YgfbJW03Zm9UsB7KIbISJQ==,type:str]
     pgp:
         - created_at: "2024-07-08T15:20:55Z"
           enc: |-
@@ -56,4 +56,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 87ECDD306614E5105299F0D4090EB48A4669AA54
     unencrypted_suffix: _unencrypted
-    version: 3.9.1
+    version: 3.9.4