radicale

2026-07-20 18:27:54 +03:00
parent e2d3f8d84c
commit 36e976f3b6
9 changed files with 165 additions and 1 deletions
@@ -0,0 +1,44 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: radicale-config
+  namespace: radicale
+data:
+  # storage.hook (the git-commit-per-change hook in the old compose setup)
+  # called out to a webhooks sidecar that isn't part of this deployment yet,
+  # so it's dropped here rather than pointing at a script that doesn't exist.
+  config: |
+    [server]
+    hosts = 0.0.0.0:5232
+    ssl = False
+
+    [auth]
+    type = htpasswd
+    htpasswd_filename = /config/users
+    htpasswd_encryption = bcrypt
+
+    [rights]
+    type = owner_only
+    # file = /config/rights
+
+    [storage]
+    type = multifilesystem
+    filesystem_folder = /data/collections
+
+    [headers]
+    Access-Control-Allow-Origin = *
+    Access-Control-Allow-Methods: GET, POST, OPTIONS, PROPFIND, PROPPATCH, REPORT, PUT, MOVE, DELETE, LOCK, UNLOCK
+    Access-Control-Allow-Headers: User-Agent, Authorization, Content-type, Depth, If-match, If-None-Match, Lock-Token, Timeout, Destination, Overwrite, Prefer, X-client, X-Requested-With
+    Access-Control-Expose-Headers: Etag, Preference-Applied
+  rights: |
+    # read access to root collection for all users
+    [all-read-root-collection]
+    user = .+
+    collection =
+    permission = r
+
+    # write access to own files for each user
+    [owner-write]
+    user: .+
+    collection: ^%(login)s(/.+)?$
+    permission: rw