

I suspect its got something to do with the systemd service definition. You may have to tweak the parameters under “optional security settings” to make it work. Or maybe you could start radicale manually from the command line, just for testing, and see if that works
Can you maybe give us a ls -Al of /var/lib/radicale and /var/lib/radicale/collections to double check the permissions? I just looked at the systemd documentation and the service definition looks ok.