apiVersion: v1
kind: ConfigMap
metadata:
  name: radicale-config
  namespace: pim
data:
  # storage.hook (the git-commit-per-change hook in the old compose setup)
  # called out to a webhooks sidecar that isn't part of this deployment yet,
  # so it's dropped here rather than pointing at a script that doesn't exist.
  config: |
    [server]
    hosts = 0.0.0.0:5232
    ssl = False

    [auth]
    type = htpasswd
    htpasswd_filename = /config/users
    htpasswd_encryption = bcrypt

    [rights]
    type = owner_only
    # file = /config/rights

    [storage]
    type = multifilesystem
    filesystem_folder = /data/collections

    [headers]
    Access-Control-Allow-Origin = *
    Access-Control-Allow-Methods: GET, POST, OPTIONS, PROPFIND, PROPPATCH, REPORT, PUT, MOVE, DELETE, LOCK, UNLOCK
    Access-Control-Allow-Headers: User-Agent, Authorization, Content-type, Depth, If-match, If-None-Match, Lock-Token, Timeout, Destination, Overwrite, Prefer, X-client, X-Requested-With
    Access-Control-Expose-Headers: Etag, Preference-Applied
  rights: |
    # read access to root collection for all users
    [all-read-root-collection]
    user = .+
    collection =
    permission = r

    # write access to own files for each user
    [owner-write]
    user: .+
    collection: ^%(login)s(/.+)?$
    permission: rw