From 432a8f4d22fd7ec5f5f5a63dc4ecb7efae472dd6 Mon Sep 17 00:00:00 2001
From: Devin Finlinson <devin.finlinson@pm.me>
Date: Sat, 14 Mar 2026 09:47:04 -0600
Subject: set up webdav for backups because synology is always down

---
 machines/doretta/default.nix |  2 ++
 modules/nixos/webdav.nix     | 17 +++++++++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 modules/nixos/webdav.nix

diff --git a/machines/doretta/default.nix b/machines/doretta/default.nix
index 59422b3..78b14dd 100644
--- a/machines/doretta/default.nix
+++ b/machines/doretta/default.nix
@@ -12,6 +12,8 @@
       # ./website.nix
       ../../modules/nixos/binary-cache.nix
 
+      ../../modules/nixos/webdav.nix
+
       # microvm host
       ../vm/foolcreek/default.nix
 
diff --git a/modules/nixos/webdav.nix b/modules/nixos/webdav.nix
new file mode 100644
index 0000000..299cc4a
--- /dev/null
+++ b/modules/nixos/webdav.nix
@@ -0,0 +1,17 @@
+{ config, ... }: {
+  services.webdav = {
+    enable = true;
+    settings = {
+      # only listen over tailscale, so weak auth ok. TODO: secrets management with sops or agenix
+      address = "100.64.0.2";
+      port = 8080;
+      directory = "/srv/webdav";
+      permissions = "RCUD";
+      users = [{
+        username = "defin";
+        password = "password";
+      }];
+    };
+  };
+  networking.firewall.allowedTCPPorts = [ 8080 ];
+}
-- 
cgit v1.2.3