Refactor radicale setup

vars/network.yml

@@ -55,8 +55,12 @@ syncthing_protocol_port: 22000
 syncthing_nginx_ip: '172.32.238.10'
 syncthing_app_ip: '172.32.238.11'
 
-radicale_listen_addres: '127.0.0.1'
-radicale_port: 5232
+radicale_domain: 'radicale.{{ domain_name }}'
+radicale_prefix: 24
+radicale_subnet: '172.64.238.0/{{ radicale_prefix }}'
+radicale_nginx_ip: '172.64.238.10'
+radicale_app_port: 5232
+radicale_app_ip: '172.64.238.11'
 
 transmission_domain: 'transmission.{{ domain_name }}'
 transmission_prefix: 24

vars/radicale.yml

@@ -1,5 +1,5 @@
-radicale_certificate_path: '/etc/ssl/localcerts/radicale/server_cert.pem'
-radicale_key_path: '/etc/ssl/localcerts/radicale/server_key.pem'
-radicale_certificate_authority_path: '/etc/ssl/localcerts/radicale/client_cert.pem'
-radicale_storage_path: '/etc/radicale/collections'
-radicale_version: 3.3.1
+radicale_app_dir: '/srv/docker/radicale'
+radicale_collection_dir: '{{ radicale_app_dir }}/collections'
+
+radicale_version: 3.5.1
+radicale_python_version: 3.13

vars/vpn.yml

@@ -23,6 +23,8 @@ vpn_peers:
     allowed_ips:
       - '{{ vpn_subnet }}'
       - '{{ transmission_subnet }}'
+      - '{{ syncthing_subnet }}'
+      - '{{ radicale_subnet }}'
     public_key: '4aBHRiglCOE7qEDLqeFgQ5PMMsKczpPoL4bx4jyAEDY='
     preshared_key_path: '{{ vpn_config_dir }}/keys/private/preshared-mobile.psk'
     preshared_key_source_path: 'files/wireguard/default/preshared-mobile.psk'