Initial commit

docker/mdcaldav.toml

@@ -0,0 +1,25 @@
+[vault]
+path = "/vault"
+include = ["**/*.md"]
+exclude = [".git/**", ".zk/**", ".obsidian/**", "assets/**"]
+# Long-running server: keep the index warm off the request path.
+watch = true
+# Bind mounts sometimes drop inotify events; uncomment to poll instead.
+# poll_interval = 2.0
+
+[collections]
+group_by = "directory"
+depth = 1
+
+[write]
+allow_create = true
+allow_delete = true
+inbox = "inbox.md"
+inbox_heading = "## Inbox"
+delete_children = "cascade"
+# Recommended until you trust write-back. Kept outside the vault.
+backup_dir = "/data/backups"
+
+[index]
+# Must NOT live inside /vault — it is a derived cache, not a note.
+db = "/data/index.db"

docker/radicale.conf

@@ -0,0 +1,21 @@
+[server]
+hosts = 0.0.0.0:5232
+
+[storage]
+# Our plugin. The vault config itself comes from MDCALDAV_CONFIG, because
+# Radicale rejects unknown keys in its own schema.
+type = mdcaldav.storage
+
+[auth]
+type = htpasswd
+htpasswd_filename = /config/users
+htpasswd_encryption = autodetect
+
+[logging]
+level = info
+
+# Uncomment when serving behind a reverse proxy at a sub-path, so this instance
+# can share a hostname with an existing Radicale:
+#   location /notes/ { proxy_pass http://127.0.0.1:5233/; }
+# [server]
+# script_name = /notes