{...}:{
services.radicale = {
  enable = true;
  settings = {
    server.hosts = [ "0.0.0.0:5232" ];
    auth = {
      type = "ldap";
      ldap_uri = "ldap://localhost:3890";
      ldap_base = "dc=stuce,dc=ch";
      ldap_reader_dn = "uid=bind_user_radicale,ou=people,dc=stuce,dc=ch";
      ldap_secret_file = "/var/lib/radicale/ldap_password";
      ldap_filter = "(&(objectClass=person)(uid={0})(memberOf=cn=calendrier,ou=groups,dc=stuce,dc=ch))";
      # ldap_filter = "(&(objectClass=person)(uid={0}))";
      lc_username = true;

    };
  };
};
}