commit 022c5b0922b393cf9784d2d8d76e065b5de607c5 · pyrox.dev/nixpkgs

nixos/doc/manual/release-notes/rl-2105.xml

···

       715
        
            The <package>yadm</package> dotfile manager has been updated from 2.x to 3.x, which has new (XDG) default locations for some data/state files. Most yadm commands will fail and print a legacy path warning (which describes how to upgrade/migrate your repository). If you have scripts, daemons, scheduled jobs, shell profiles, etc. that invoke yadm, expect them to fail or misbehave until you perform this migration and prepare accordingly.

     

       716
        
           </para>

     

       717
        
          </listitem>

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       718
        
         </itemizedlist>

     

       719
        
        </section>

     

       720

···

       715
        
            The <package>yadm</package> dotfile manager has been updated from 2.x to 3.x, which has new (XDG) default locations for some data/state files. Most yadm commands will fail and print a legacy path warning (which describes how to upgrade/migrate your repository). If you have scripts, daemons, scheduled jobs, shell profiles, etc. that invoke yadm, expect them to fail or misbehave until you perform this migration and prepare accordingly.

     

       716
        
           </para>

     

       717
        
          </listitem>

     

       718
       +
          <listitem>

     

       719
       +
           <para>

     

       720
       +
            Instead of determining <option>services.radicale.package</option>

     

       721
       +
            automatically based on <option>system.stateVersion</option>, the latest

     

       722
       +
            version is always used because old versions are not officially supported.

     

       723
       +
           </para>

     

       724
       +
          </listitem>

     

       725
        
         </itemizedlist>

     

       726
        
        </section>

     

       727

+113 -36

nixos/modules/services/networking/radicale.nix

···

       3
        
       with lib;

     

       4
        
       

     

       5
        
       let

     

       6
       -
       

     

       7
        
         cfg = config.services.radicale;

     

       8
        
       

     

       9
       -
         confFile = pkgs.writeText "radicale.conf" cfg.config;

     

       10
       -
       

     

       11
       -
         defaultPackage = if versionAtLeast config.system.stateVersion "20.09" then {

     

       12
       -
           pkg = pkgs.radicale3;

     

       13
       -
           text = "pkgs.radicale3";

     

       14
       -
         } else if versionAtLeast config.system.stateVersion "17.09" then {

     

       15
       -
           pkg = pkgs.radicale2;

     

       16
       -
           text = "pkgs.radicale2";

     

       17
       -
         } else {

     

       18
       -
           pkg = pkgs.radicale1;

     

       19
       -
           text = "pkgs.radicale1";

     

       20
        
         };

     

       21
       -
       in

     

       22
        
       

     

       23
       -
       {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       24
        
       

     

       25
       -
         options = {

     

       26
       -
           services.radicale.enable = mkOption {

     

       27
       -
             type = types.bool;

     

       28
       -
             default = false;

     

       29
        
             description = ''

     

       30
       -
                 Enable Radicale CalDAV and CardDAV server.

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       31
        
             '';

     

       32
        
           };

     

       33
        
       

     

       34
       -
           services.radicale.package = mkOption {

     

       35
       -
             type = types.package;

     

       36
       -
             default = defaultPackage.pkg;

     

       37
       -
             defaultText = defaultPackage.text;

     

       38
        
             description = ''

     

       39
       -
               Radicale package to use. This defaults to version 1.x if

     

       40
       -
               <literal>system.stateVersion &lt; 17.09</literal>, version 2.x if

     

       41
       -
               <literal>17.09 ≤ system.stateVersion &lt; 20.09</literal>, and

     

       42
       -
               version 3.x otherwise.

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       43
        
             '';

     

       44
        
           };

     

       45
        
       

     

       46
       -
           services.radicale.config = mkOption {

     

       47
       -
             type = types.str;

     

       48
       -
             default = "";

     

       49
        
             description = ''

     

       50
       -
               Radicale configuration, this will set the service

     

       51
       -
               configuration file.

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       52
        
             '';

     

       53
        
           };

     

       54
        
       

     

       55
       -
           services.radicale.extraArgs = mkOption {

     

       56
        
             type = types.listOf types.str;

     

       57
        
             default = [];

     

       58
        
             description = "Extra arguments passed to the Radicale daemon.";

     
···

       60
        
         };

     

       61
        
       

     

       62
        
         config = mkIf cfg.enable {

     

       63
       -
           environment.systemPackages = [ cfg.package ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       64
        
       

     

       65
        
           users.users.radicale =

     

       66
        
             { uid = config.ids.uids.radicale;

     
···

       75
        
           systemd.services.radicale = {

     

       76
        
             description = "A Simple Calendar and Contact Server";

     

       77
        
             after = [ "network.target" ];

     

       0
        
       
     

       78
        
             wantedBy = [ "multi-user.target" ];

     

       79
        
             serviceConfig = {

     

       80
        
               ExecStart = concatStringsSep " " ([

     

       81
       -
                 "${cfg.package}/bin/radicale" "-C" confFile

     

       82
        
               ] ++ (

     

       83
        
                 map escapeShellArg cfg.extraArgs

     

       84
        
               ));

     
···

       88
        
           };

     

       89
        
         };

     

       90
        
       

     

       91
       -
         meta.maintainers = with lib.maintainers; [ aneeshusa infinisil ];

     

       92
        
       }

···

       3
        
       with lib;

     

       4
        
       

     

       5
        
       let

     

       0
        
       
     

       6
        
         cfg = config.services.radicale;

     

       7
        
       

     

       8
       +
         format = pkgs.formats.ini {

     

       9
       +
           listToValue = concatMapStringsSep ", " (generators.mkValueStringDefault { });

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       10
        
         };

     

       0
        
       
     

       11
        
       

     

       12
       +
         pkg = if isNull cfg.package then

     

       13
       +
           pkgs.radicale

     

       14
       +
         else

     

       15
       +
           cfg.package;

     

       16
       +
       

     

       17
       +
         confFile = if cfg.settings == { } then

     

       18
       +
           pkgs.writeText "radicale.conf" cfg.config

     

       19
       +
         else

     

       20
       +
           format.generate "radicale.conf" cfg.settings;

     

       21
       +
       

     

       22
       +
         rightsFile = format.generate "radicale.rights" cfg.rights;

     

       23
       +
       

     

       24
       +
       in {

     

       25
       +
         options.services.radicale = {

     

       26
       +
           enable = mkEnableOption "Radicale CalDAV and CardDAV server";

     

       27
       +
       

     

       28
       +
           package = mkOption {

     

       29
       +
             description = "Radicale package to use.";

     

       30
       +
             # Default cannot be pkgs.radicale because non-null values suppress

     

       31
       +
             # warnings about incompatible configuration and storage formats.

     

       32
       +
             type = with types; nullOr package // { inherit (package) description; };

     

       33
       +
             default = null;

     

       34
       +
             defaultText = "pkgs.radicale";

     

       35
       +
           };

     

       36
        
       

     

       37
       +
           config = mkOption {

     

       38
       +
             type = types.str;

     

       39
       +
             default = "";

     

       0
        
       
     

       40
        
             description = ''

     

       41
       +
               Radicale configuration, this will set the service

     

       42
       +
               configuration file.

     

       43
       +
               This option is mutually exclusive with <option>settings</option>.

     

       44
       +
               This option is deprecated.  Use <option>settings</option> instead.

     

       45
        
             '';

     

       46
        
           };

     

       47
        
       

     

       48
       +
           settings = mkOption {

     

       49
       +
             type = format.type;

     

       50
       +
             default = { };

     

       0
        
       
     

       51
        
             description = ''

     

       52
       +
               Configuration for Radicale. See

     

       53
       +
               <link xlink:href="https://radicale.org/3.0.html#documentation/configuration" />.

     

       54
       +
               This option is mutually exclusive with <option>config</option>.

     

       55
       +
             '';

     

       56
       +
             example = literalExample ''

     

       57
       +
               server = {

     

       58
       +
                 hosts = [ "0.0.0.0:5232" "[::]:5232" ];

     

       59
       +
               };

     

       60
       +
               auth = {

     

       61
       +
                 type = "htpasswd";

     

       62
       +
                 htpasswd_filename = "/etc/radicale/users";

     

       63
       +
                 htpasswd_encryption = "bcrypt";

     

       64
       +
               };

     

       65
       +
               storage = {

     

       66
       +
                 filesystem_folder = "/var/lib/radicale/collections";

     

       67
       +
               };

     

       68
        
             '';

     

       69
        
           };

     

       70
        
       

     

       71
       +
           rights = mkOption {

     

       72
       +
             type = format.type;

     

       0
        
       
     

       73
        
             description = ''

     

       74
       +
               Configuration for Radicale's rights file. See

     

       75
       +
               <link xlink:href="https://radicale.org/3.0.html#documentation/authentication-and-rights" />.

     

       76
       +
               This option only works in conjunction with <option>settings</option>.

     

       77
       +
               Setting this will also set <option>settings.rights.type</option> and

     

       78
       +
               <option>settings.rights.file</option> to approriate values.

     

       79
       +
             '';

     

       80
       +
             default = { };

     

       81
       +
             example = literalExample ''

     

       82
       +
               root = {

     

       83
       +
                 user = ".+";

     

       84
       +
                 collection = "";

     

       85
       +
                 permissions = "R";

     

       86
       +
               };

     

       87
       +
               principal = {

     

       88
       +
                 user = ".+";

     

       89
       +
                 collection = "{user}";

     

       90
       +
                 permissions = "RW";

     

       91
       +
               };

     

       92
       +
               calendars = {

     

       93
       +
                 user = ".+";

     

       94
       +
                 collection = "{user}/[^/]+";

     

       95
       +
                 permissions = "rw";

     

       96
       +
               };

     

       97
        
             '';

     

       98
        
           };

     

       99
        
       

     

       100
       +
           extraArgs = mkOption {

     

       101
        
             type = types.listOf types.str;

     

       102
        
             default = [];

     

       103
        
             description = "Extra arguments passed to the Radicale daemon.";

     
···

       105
        
         };

     

       106
        
       

     

       107
        
         config = mkIf cfg.enable {

     

       108
       +
           assertions = [

     

       109
       +
             {

     

       110
       +
               assertion = cfg.settings == { } || cfg.config == "";

     

       111
       +
               message = ''

     

       112
       +
                 The options services.radicale.config and services.radicale.settings

     

       113
       +
                 are mutually exclusive.

     

       114
       +
               '';

     

       115
       +
             }

     

       116
       +
           ];

     

       117
       +
       

     

       118
       +
           warnings = optional (isNull cfg.package && versionOlder config.system.stateVersion "17.09") ''

     

       119
       +
             The configuration and storage formats of your existing Radicale

     

       120
       +
             installation might be incompatible with the newest version.

     

       121
       +
             For upgrade instructions see

     

       122
       +
             https://radicale.org/2.1.html#documentation/migration-from-1xx-to-2xx.

     

       123
       +
             Set services.radicale.package to suppress this warning.

     

       124
       +
           '' ++ optional (isNull cfg.package && versionOlder config.system.stateVersion "20.09") ''

     

       125
       +
             The configuration format of your existing Radicale installation might be

     

       126
       +
             incompatible with the newest version.  For upgrade instructions see

     

       127
       +
             https://github.com/Kozea/Radicale/blob/3.0.6/NEWS.md#upgrade-checklist.

     

       128
       +
             Set services.radicale.package to suppress this warning.

     

       129
       +
           '' ++ optional (cfg.config != "") ''

     

       130
       +
             The option services.radicale.config is deprecated.

     

       131
       +
             Use services.radicale.settings instead.

     

       132
       +
           '';

     

       133
       +
       

     

       134
       +
           services.radicale.settings.rights = mkIf (cfg.rights != { }) {

     

       135
       +
             type = "from_file";

     

       136
       +
             file = toString rightsFile;

     

       137
       +
           };

     

       138
       +
       

     

       139
       +
           environment.systemPackages = [ pkg ];

     

       140
        
       

     

       141
        
           users.users.radicale =

     

       142
        
             { uid = config.ids.uids.radicale;

     
···

       151
        
           systemd.services.radicale = {

     

       152
        
             description = "A Simple Calendar and Contact Server";

     

       153
        
             after = [ "network.target" ];

     

       154
       +
             requires = [ "network.target" ];

     

       155
        
             wantedBy = [ "multi-user.target" ];

     

       156
        
             serviceConfig = {

     

       157
        
               ExecStart = concatStringsSep " " ([

     

       158
       +
                 "${pkg}/bin/radicale" "-C" confFile

     

       159
        
               ] ++ (

     

       160
        
                 map escapeShellArg cfg.extraArgs

     

       161
        
               ));

     
···

       165
        
           };

     

       166
        
         };

     

       167
        
       

     

       168
       +
         meta.maintainers = with lib.maintainers; [ aneeshusa infinisil dotlambda ];

     

       169
        
       }

+73 -123

nixos/tests/radicale.nix

···

       0
        
       
     

       0
        
       
     

       1
        
       let

     

       2
        
         user = "someuser";

     

       3
        
         password = "some_password";

     

       4
       -
         port = builtins.toString 5232;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       5
        
       

     

       6
       -
         common = { pkgs, ... }: {

     

       7
        
           services.radicale = {

     

       8
        
             enable = true;

     

       9
       -
             config = ''

     

       10
       -
               [auth]

     

       11
       -
               type = htpasswd

     

       12
       -
               htpasswd_filename = /etc/radicale/htpasswd

     

       13
       -
               htpasswd_encryption = bcrypt

     

       14
       -
       

     

       15
       -
               [storage]

     

       16
       -
               filesystem_folder = /tmp/collections

     

       17
       -
             '';

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       18
        
           };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       19
        
           # WARNING: DON'T DO THIS IN PRODUCTION!

     

       20
        
           # This puts unhashed secrets directly into the Nix store for ease of testing.

     

       21
       -
           environment.etc."radicale/htpasswd".source = pkgs.runCommand "htpasswd" {} ''

     

       22
        
             ${pkgs.apacheHttpd}/bin/htpasswd -bcB "$out" ${user} ${password}

     

       23
        
           '';

     

       24
        
         };

     

       25
       -
       

     

       26
       -
       in

     

       27
       -
       

     

       28
       -
         import ./make-test-python.nix ({ lib, ... }@args: {

     

       29
       -
           name = "radicale";

     

       30
       -
           meta.maintainers = with lib.maintainers; [ aneeshusa infinisil ];

     

       31
       -
       

     

       32
       -
           nodes = rec {

     

       33
       -
             radicale = radicale1; # Make the test script read more nicely

     

       34
       -
             radicale1 = lib.recursiveUpdate (common args) {

     

       35
       -
               nixpkgs.overlays = [

     

       36
       -
                 (self: super: {

     

       37
       -
                   radicale1 = super.radicale1.overrideAttrs (oldAttrs: {

     

       38
       -
                     propagatedBuildInputs = with self.pythonPackages;

     

       39
       -
                       (oldAttrs.propagatedBuildInputs or []) ++ [ passlib ];

     

       40
       -
                   });

     

       41
       -
                 })

     

       42
       -
               ];

     

       43
       -
               system.stateVersion = "17.03";

     

       44
       -
             };

     

       45
       -
             radicale1_export = lib.recursiveUpdate radicale1 {

     

       46
       -
               services.radicale.extraArgs = [

     

       47
       -
                 "--export-storage" "/tmp/collections-new"

     

       48
       -
               ];

     

       49
       -
               system.stateVersion = "17.03";

     

       50
       -
             };

     

       51
       -
             radicale2_verify = lib.recursiveUpdate radicale2 {

     

       52
       -
               services.radicale.extraArgs = [ "--debug" "--verify-storage" ];

     

       53
       -
               system.stateVersion = "17.09";

     

       54
       -
             };

     

       55
       -
             radicale2 = lib.recursiveUpdate (common args) {

     

       56
       -
               system.stateVersion = "17.09";

     

       57
       -
             };

     

       58
       -
             radicale3 = lib.recursiveUpdate (common args) {

     

       59
       -
               system.stateVersion = "20.09";

     

       60
       -
             };

     

       61
       -
           };

     

       62
       -
       

     

       63
       -
           # This tests whether the web interface is accessible to an authenticated user

     

       64
       -
           testScript = { nodes }: let

     

       65
       -
             switchToConfig = nodeName: let

     

       66
       -
               newSystem = nodes.${nodeName}.config.system.build.toplevel;

     

       67
       -
             in "${newSystem}/bin/switch-to-configuration test";

     

       68
       -
           in ''

     

       69
       -
             with subtest("Check Radicale 1 functionality"):

     

       70
       -
                 radicale.succeed(

     

       71
       -
                     "${switchToConfig "radicale1"} >&2"

     

       72
       -
                 )

     

       73
       -
                 radicale.wait_for_unit("radicale.service")

     

       74
       -
                 radicale.wait_for_open_port(${port})

     

       75
       -
                 radicale.succeed(

     

       76
       -
                     "curl --fail http://${user}:${password}@localhost:${port}/someuser/calendar.ics/"

     

       77
       -
                 )

     

       78
       -
       

     

       79
       -
             with subtest("Export data in Radicale 2 format"):

     

       80
       -
                 radicale.succeed("systemctl stop radicale")

     

       81
       -
                 radicale.succeed("ls -al /tmp/collections")

     

       82
       -
                 radicale.fail("ls -al /tmp/collections-new")

     

       83
       -
       

     

       84
       -
             with subtest("Radicale exits immediately after exporting storage"):

     

       85
       -
                 radicale.succeed(

     

       86
       -
                     "${switchToConfig "radicale1_export"} >&2"

     

       87
       -
                 )

     

       88
       -
                 radicale.wait_until_fails("systemctl status radicale")

     

       89
       -
                 radicale.succeed("ls -al /tmp/collections")

     

       90
       -
                 radicale.succeed("ls -al /tmp/collections-new")

     

       91
       -
       

     

       92
       -
             with subtest("Verify data in Radicale 2 format"):

     

       93
       -
                 radicale.succeed("rm -r /tmp/collections/${user}")

     

       94
       -
                 radicale.succeed("mv /tmp/collections-new/collection-root /tmp/collections")

     

       95
       -
                 radicale.succeed(

     

       96
       -
                     "${switchToConfig "radicale2_verify"} >&2"

     

       97
       -
                 )

     

       98
       -
                 radicale.wait_until_fails("systemctl status radicale")

     

       99
       -
       

     

       100
       -
                 (retcode, logs) = radicale.execute("journalctl -u radicale -n 10")

     

       101
       -
                 assert (

     

       102
       -
                     retcode == 0 and "Verifying storage" in logs

     

       103
       -
                 ), "Radicale 2 didn't verify storage"

     

       104
       -
                 assert (

     

       105
       -
                     "failed" not in logs and "exception" not in logs

     

       106
       -
                 ), "storage verification failed"

     

       107
       -
       

     

       108
       -
             with subtest("Check Radicale 2 functionality"):

     

       109
       -
                 radicale.succeed(

     

       110
       -
                     "${switchToConfig "radicale2"} >&2"

     

       111
       -
                 )

     

       112
       -
                 radicale.wait_for_unit("radicale.service")

     

       113
       -
                 radicale.wait_for_open_port(${port})

     

       114
       -
       

     

       115
       -
                 (retcode, output) = radicale.execute(

     

       116
       -
                     "curl --fail http://${user}:${password}@localhost:${port}/someuser/calendar.ics/"

     

       117
       -
                 )

     

       118
       -
                 assert (

     

       119
       -
                     retcode == 0 and "VCALENDAR" in output

     

       120
       -
                 ), "Could not read calendar from Radicale 2"

     

       121
        
       

     

       122
       -
                 radicale.succeed("curl --fail http://${user}:${password}@localhost:${port}/.web/")

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       123
        
       

     

       124
       -
             with subtest("Check Radicale 3 functionality"):

     

       125
       -
                 radicale.succeed(

     

       126
       -
                     "${switchToConfig "radicale3"} >&2"

     

       127
       -
                 )

     

       128
       -
                 radicale.wait_for_unit("radicale.service")

     

       129
       -
                 radicale.wait_for_open_port(${port})

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       130
        
       

     

       131
       -
                 (retcode, output) = radicale.execute(

     

       132
       -
                     "curl --fail http://${user}:${password}@localhost:${port}/someuser/calendar.ics/"

     

       133
       -
                 )

     

       134
       -
                 assert (

     

       135
       -
                     retcode == 0 and "VCALENDAR" in output

     

       136
       -
                 ), "Could not read calendar from Radicale 3"

     

       0
        
       
     

       137
        
       

     

       138
       -
                 radicale.succeed("curl --fail http://${user}:${password}@localhost:${port}/.web/")

     

       139
       -
           '';

     

       0
        
       
     

       140
        
       })

···

       1
       +
       import ./make-test-python.nix ({ lib, pkgs, ... }:

     

       2
       +
       

     

       3
        
       let

     

       4
        
         user = "someuser";

     

       5
        
         password = "some_password";

     

       6
       +
         port = "5232";

     

       7
       +
         filesystem_folder = "/data/radicale";

     

       8
       +
       

     

       9
       +
         cli = "${pkgs.calendar-cli}/bin/calendar-cli --caldav-user ${user} --caldav-pass ${password}";

     

       10
       +
       in {

     

       11
       +
         name = "radicale3";

     

       12
       +
         meta.maintainers = with lib.maintainers; [ dotlambda ];

     

       13
        
       

     

       14
       +
         machine = { pkgs, ... }: {

     

       15
        
           services.radicale = {

     

       16
        
             enable = true;

     

       17
       +
             settings = {

     

       18
       +
               auth = {

     

       19
       +
                 type = "htpasswd";

     

       20
       +
                 htpasswd_filename = "/etc/radicale/users";

     

       21
       +
                 htpasswd_encryption = "bcrypt";

     

       22
       +
               };

     

       23
       +
               storage = {

     

       24
       +
                 inherit filesystem_folder;

     

       25
       +
                 hook = "git add -A && (git diff --cached --quiet || git commit -m 'Changes by '%(user)s)";

     

       26
       +
               };

     

       27
       +
               logging.level = "info";

     

       28
       +
             };

     

       29
       +
             rights = {

     

       30
       +
               principal = {

     

       31
       +
                 user = ".+";

     

       32
       +
                 collection = "{user}";

     

       33
       +
                 permissions = "RW";

     

       34
       +
               };

     

       35
       +
               calendars = {

     

       36
       +
                 user = ".+";

     

       37
       +
                 collection = "{user}/[^/]+";

     

       38
       +
                 permissions = "rw";

     

       39
       +
               };

     

       40
       +
             };

     

       41
        
           };

     

       42
       +
           systemd.services.radicale.path = [ pkgs.git ];

     

       43
       +
           environment.systemPackages = [ pkgs.git ];

     

       44
       +
           systemd.tmpfiles.rules = [ "d ${filesystem_folder} 0750 radicale radicale -" ];

     

       45
        
           # WARNING: DON'T DO THIS IN PRODUCTION!

     

       46
        
           # This puts unhashed secrets directly into the Nix store for ease of testing.

     

       47
       +
           environment.etc."radicale/users".source = pkgs.runCommand "htpasswd" {} ''

     

       48
        
             ${pkgs.apacheHttpd}/bin/htpasswd -bcB "$out" ${user} ${password}

     

       49
        
           '';

     

       50
        
         };

     

       51
       +
         testScript = ''

     

       52
       +
           machine.wait_for_unit("radicale.service")

     

       53
       +
           machine.wait_for_open_port(${port})

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       54
        
       

     

       55
       +
           machine.succeed("sudo -u radicale git -C ${filesystem_folder} init")

     

       56
       +
           machine.succeed(

     

       57
       +
               "sudo -u radicale git -C ${filesystem_folder} config --local user.email radicale@example.com"

     

       58
       +
           )

     

       59
       +
           machine.succeed(

     

       60
       +
               "sudo -u radicale git -C ${filesystem_folder} config --local user.name radicale"

     

       61
       +
           )

     

       62
        
       

     

       63
       +
           with subtest("Test calendar and event creation"):

     

       64
       +
               machine.succeed(

     

       65
       +
                   "${cli} --caldav-url http://localhost:${port}/${user} calendar create cal"

     

       66
       +
               )

     

       67
       +
               machine.succeed("test -d ${filesystem_folder}/collection-root/${user}/cal")

     

       68
       +
               machine.succeed('test -z "$(ls ${filesystem_folder}/collection-root/${user}/cal)"')

     

       69
       +
               machine.succeed(

     

       70
       +
                   "${cli} --caldav-url http://localhost:${port}/${user}/cal calendar add 2021-04-23 testevent"

     

       71
       +
               )

     

       72
       +
               machine.succeed('test -n "$(ls ${filesystem_folder}/collection-root/${user}/cal)"')

     

       73
       +
               (status, stdout) = machine.execute(

     

       74
       +
                   "sudo -u radicale git -C ${filesystem_folder} log --format=oneline | wc -l"

     

       75
       +
               )

     

       76
       +
               assert status == 0, "git log failed"

     

       77
       +
               assert stdout == "3\n", "there should be exactly 3 commits"

     

       78
        
       

     

       79
       +
           with subtest("Test rights file"):

     

       80
       +
               machine.fail(

     

       81
       +
                   "${cli} --caldav-url http://localhost:${port}/${user} calendar create sub/cal"

     

       82
       +
               )

     

       83
       +
               machine.fail(

     

       84
       +
                   "${cli} --caldav-url http://localhost:${port}/otheruser calendar create cal"

     

       85
       +
               )

     

       86
        
       

     

       87
       +
           with subtest("Test web interface"):

     

       88
       +
               machine.succeed("curl --fail http://${user}:${password}@localhost:${port}/.web/")

     

       89
       +
         '';

     

       90
        
       })