From dc8d96cae8153d6fdc5122c4f1f96e5dc6d26767 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Wed, 11 Feb 2026 18:15:34 +0100
Subject: [PATCH] Move radicale from vps-public to vps-private

---
 hosts/vps-private/default.nix |  6 ++++++
 hosts/vps-public/default.nix  | 15 +--------------
 2 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/hosts/vps-private/default.nix b/hosts/vps-private/default.nix
index 3435a40..19f30cd 100644
--- a/hosts/vps-private/default.nix
+++ b/hosts/vps-private/default.nix
@@ -47,6 +47,12 @@
           doBackups = true;
         };
 
+        radicale = {
+          enable = true;
+          domain = "dav.${privateDomain}";
+          doBackups = true;
+        };
+
         actualbudget = {
           enable = true;
           domain = "budget.${privateDomain}";
diff --git a/hosts/vps-public/default.nix b/hosts/vps-public/default.nix
index 68a8c99..2a4e171 100644
--- a/hosts/vps-public/default.nix
+++ b/hosts/vps-public/default.nix
@@ -1,4 +1,4 @@
-{ config, self, ... }:
+{ self, ... }:
 {
   imports = [ self.nixosModules.server-profile ];
 
@@ -21,13 +21,6 @@
         };
       };
 
-      services.caddy.virtualHosts."dav.${sproutedDomain}" = {
-        inherit (config.custom.web-services.radicale) port;
-        extraConfig = ''
-          respond /.web/ "Access denied" 403 { close }
-        '';
-      };
-
       web-services =
         let
           sstorkDomain = "sstork.dev";
@@ -70,12 +63,6 @@
             enable = true;
             domain = "mirror.${sproutedDomain}";
           };
-
-          radicale = {
-            enable = true;
-            domain = "dav.${config.custom.networking.overlay.domain}";
-            doBackups = true;
-          };
         };
     };
 }