lockfile update and hetzner radicale server.

Hetzner server will eventually have other things on it.

configs/nixos/nginx.nix

@@ -0,0 +1,23 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+    commonHttpConfig = ''
+      add_header X-Clacks-Overhead "GNU Terry Pratchett";
+      add_header X-Clacks-Overhead "GNU Bram Moolenaar";
+    '';
+    # other Nginx options
+  };
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "gabevenberg@gmail.com";
+  };
+  networking.firewall.allowedTCPPorts = [443 80];
+}

configs/nixos/radicale.nix

@@ -18,4 +18,5 @@
       };
     };
   };
+  networking.firewall.allowedTCPPorts = [5232];
 }