diff --git a/appinfo/routes.php b/appinfo/routes.php
index 45dfd47..2fc8598 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -7,8 +7,7 @@
 
 declare(strict_types=1);
 
+// Routes are declared via #[FrontpageRoute] attributes on the controllers.
 return [
-	'routes' => [
-		['name' => 'AdminConfiguration#depositConfiguration', 'url' => '/admin-configuration', 'verb' => 'PUT'],
-	]
+	'routes' => [],
 ];
diff --git a/lib/Controller/AdminConfigurationController.php b/lib/Controller/AdminConfigurationController.php
index a9a1f1d..073103f 100644
--- a/lib/Controller/AdminConfigurationController.php
+++ b/lib/Controller/AdminConfigurationController.php
@@ -11,6 +11,7 @@
 
 use OCA\DAVC\Service\ConfigurationService;
 use OCP\AppFramework\Controller;
+use OCP\AppFramework\Http\Attribute\FrontpageRoute;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\IRequest;
 
@@ -33,6 +34,7 @@ public function __construct(string $appName, IRequest $request, ConfigurationSer
 	 *
 	 * @return DataResponse
 	 */
+	#[FrontpageRoute(verb: 'POST', url: '/admin-configuration')]
 	public function depositConfiguration(array $values): DataResponse {
 
 		$this->ConfigurationService->depositSystem($values);
diff --git a/lib/Controller/AdminTemplateController.php b/lib/Controller/AdminTemplateController.php
new file mode 100644
index 0000000..d3aba89
--- /dev/null
+++ b/lib/Controller/AdminTemplateController.php
@@ -0,0 +1,101 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\DAVC\Controller;
+
+use OCA\DAVC\Service\ServicesTemplateService;
+use OCA\DAVC\Utile\Validator;
+use OCP\AppFramework\Controller;
+use OCP\AppFramework\Http;
+use OCP\AppFramework\Http\Attribute\FrontpageRoute;
+use OCP\AppFramework\Http\DataResponse;
+use OCP\IRequest;
+
+class AdminTemplateController extends Controller {
+
+	public function __construct(
+		string $appName,
+		IRequest $request,
+		private ServicesTemplateService $templateService,
+	) {
+		parent::__construct($appName, $request);
+	}
+
+	/**
+	 * list all service discovery templates
+	 *
+	 * @return DataResponse
+	 */
+	#[FrontpageRoute(verb: 'GET', url: '/admin/templates')]
+	public function list(): DataResponse {
+
+		return new DataResponse($this->templateService->list());
+	}
+
+	/**
+	 * create a service discovery template
+	 *
+	 * @param string $domain email domain the template applies to
+	 * @param array $connection connection settings
+	 *
+	 * @return DataResponse
+	 */
+	#[FrontpageRoute(verb: 'POST', url: '/admin/templates/create')]
+	public function create(string $domain, array $connection = []): DataResponse {
+
+		$domain = trim($domain);
+		if (!Validator::fqdn($domain)) {
+			return new DataResponse('Invalid domain provided.', Http::STATUS_BAD_REQUEST);
+		}
+		if (!$this->templateService->create($domain, $connection)) {
+			return new DataResponse('Failed to create service template.', Http::STATUS_INTERNAL_SERVER_ERROR);
+		}
+		return new DataResponse($this->templateService->list());
+	}
+
+	/**
+	 * modify a service discovery template
+	 *
+	 * @param string $id service template id
+	 * @param string $domain email domain the template applies to
+	 * @param array $connection connection settings
+	 *
+	 * @return DataResponse
+	 */
+	#[FrontpageRoute(verb: 'POST', url: '/admin/templates/modify')]
+	public function modify(string $id, string $domain, array $connection = []): DataResponse {
+
+		$domain = trim($domain);
+		if ($id === '') {
+			return new DataResponse('Invalid template id.', Http::STATUS_BAD_REQUEST);
+		}
+		if (!Validator::fqdn($domain)) {
+			return new DataResponse('Invalid domain provided.', Http::STATUS_BAD_REQUEST);
+		}
+		$this->templateService->modify($id, $domain, $connection);
+		return new DataResponse($this->templateService->list());
+	}
+
+	/**
+	 * delete a service discovery template
+	 *
+	 * @param string $id service template id
+	 *
+	 * @return DataResponse
+	 */
+	#[FrontpageRoute(verb: 'POST', url: '/admin/templates/delete')]
+	public function destroy(string $id): DataResponse {
+
+		if ($id === '') {
+			return new DataResponse('Invalid template id.', Http::STATUS_BAD_REQUEST);
+		}
+		$this->templateService->delete($id);
+		return new DataResponse($this->templateService->list());
+	}
+}
diff --git a/lib/Migration/Version0010Date20260501000002.php b/lib/Migration/Version0010Date20260501000002.php
index 2aad5a7..dd95f2a 100644
--- a/lib/Migration/Version0010Date20260501000002.php
+++ b/lib/Migration/Version0010Date20260501000002.php
@@ -43,8 +43,8 @@ public function changeSchema(IOutput $output, Closure $schemaClosure, array $opt
 			'length' => 255,
 			'notnull' => true
 		]);
-		// connection
-		$table->addColumn('connection', Types::BLOB, [
+		// connection (JSON document)
+		$table->addColumn('connection', Types::TEXT, [
 			'length' => 16777215, // 16MB
 			'notnull' => true
 		]);
diff --git a/lib/Service/ServicesTemplateService.php b/lib/Service/ServicesTemplateService.php
index 69dcebb..bc5b56b 100644
--- a/lib/Service/ServicesTemplateService.php
+++ b/lib/Service/ServicesTemplateService.php
@@ -10,6 +10,7 @@
 namespace OCA\DAVC\Service;
 
 use OCA\DAVC\Store\Local\ServicesTemplateStore;
+use OCA\DAVC\Utile\UUID;
 
 class ServicesTemplateService {
 	private ServicesTemplateStore $_Store;
@@ -25,4 +26,64 @@ public function findByDomain(string $domain): array {
 		return $this->_Store->fetchByDomain($domain);
 	}
 
+	/**
+	 * list all service templates with decoded connection settings
+	 *
+	 * @since Release 1.0.0
+	 *
+	 * @return array
+	 */
+	public function list(): array {
+
+		return array_map(static function (array $template): array {
+			$template['connection'] = json_decode((string)$template['connection'], true) ?: [];
+			return $template;
+		}, $this->_Store->list());
+	}
+
+	/**
+	 * create a new service template
+	 *
+	 * @since Release 1.0.0
+	 *
+	 * @param string $domain service domain
+	 * @param array $connection connection settings
+	 *
+	 * @return bool
+	 */
+	public function create(string $domain, array $connection): bool {
+
+		return $this->_Store->create(UUID::v4(), $domain, $connection);
+	}
+
+	/**
+	 * modify an existing service template
+	 *
+	 * @since Release 1.0.0
+	 *
+	 * @param string $id service template id
+	 * @param string $domain service domain
+	 * @param array $connection connection settings
+	 *
+	 * @return bool
+	 */
+	public function modify(string $id, string $domain, array $connection): bool {
+
+		return $this->_Store->modify($id, $domain, $connection);
+	}
+
+	/**
+	 * delete a service template
+	 *
+	 * @since Release 1.0.0
+	 *
+	 * @param string $id service template id
+	 *
+	 * @return bool
+	 */
+	public function delete(string $id): bool {
+
+		return $this->_Store->delete($id);
+	}
+
 }
diff --git a/lib/Store/Local/ServicesTemplateStore.php b/lib/Store/Local/ServicesTemplateStore.php
index 9105758..8d93140 100644
--- a/lib/Store/Local/ServicesTemplateStore.php
+++ b/lib/Store/Local/ServicesTemplateStore.php
@@ -20,6 +20,25 @@ public function __construct(IDBConnection $store) {
 		$this->_Store = $store;
 	}
 
+	/**
+	 * normalise blob columns to strings
+	 *
+	 * On PostgreSQL (and Oracle) text/blob columns can be returned as stream
+	 * resources rather than strings, so decode them before returning rows.
+	 *
+	 * @param array $rows
+	 *
+	 * @return array
+	 */
+	private function decodeRows(array $rows): array {
+		foreach ($rows as &$row) {
+			if (isset($row['connection']) && is_resource($row['connection'])) {
+				$row['connection'] = stream_get_contents($row['connection']);
+			}
+		}
+		return $rows;
+	}
+
 	/**
 	 * retrieve service templates
 	 *
@@ -36,12 +55,32 @@ public function fetchById(string $id): array {
 		$cmd->executeQuery()->closeCursor();
 		// return result or null
 		if (is_array($rs) && count($rs) > 0) {
-			return $rs;
+			return $this->decodeRows($rs);
 		} else {
 			return [];
 		}
 	}
 
+	/**
+	 * retrieve all service templates from data store
+	 *
+	 * @since Release 1.0.0
+	 *
+	 * @return array
+	 */
+	public function list(): array {
+		// construct data store command
+		$cmd = $this->_Store->getQueryBuilder();
+		$cmd->select('*')
+			->from($this->_EntityTable);
+		// execute command
+		$result = $cmd->executeQuery();
+		$rs = $result->fetchAll();
+		$result->closeCursor();
+		// return result
+		return is_array($rs) ? $this->decodeRows($rs) : [];
+	}
+
 	/**
 	 * retrieve service templates for specific domain from data store
 	 *
@@ -62,7 +101,7 @@ public function fetchByDomain(string $domain): array {
 		$cmd->executeQuery()->closeCursor();
 		// return result or null
 		if (is_array($rs) && count($rs) > 0) {
-			return $rs;
+			return $this->decodeRows($rs);
 		} else {
 			return [];
 		}
diff --git a/src/components/AdminServiceTemplates.vue b/src/components/AdminServiceTemplates.vue
new file mode 100644
index 0000000..3cbc77e
--- /dev/null
+++ b/src/components/AdminServiceTemplates.vue
@@ -0,0 +1,278 @@
+<!--
+ - SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+ - SPDX-License-Identifier: AGPL-3.0-or-later
+-->
+
+<script setup lang="ts">
+import axios from '@nextcloud/axios'
+import { showError, showSuccess } from '@nextcloud/dialogs'
+import { translate as t } from '@nextcloud/l10n'
+import { generateUrl } from '@nextcloud/router'
+import { computed, onMounted, ref } from 'vue'
+import NcButton from '@nextcloud/vue/components/NcButton'
+import NcDialog from '@nextcloud/vue/components/NcDialog'
+import NcSelect from '@nextcloud/vue/components/NcSelect'
+import NcTextField from '@nextcloud/vue/components/NcTextField'
+import CheckIcon from 'vue-material-design-icons/Check.vue'
+import CloseIcon from 'vue-material-design-icons/Close.vue'
+import DeleteIcon from 'vue-material-design-icons/Delete.vue'
+import PencilIcon from 'vue-material-design-icons/Pencil.vue'
+import PlusIcon from 'vue-material-design-icons/Plus.vue'
+
+interface Connection {
+	location_host?: string
+	location_protocol?: string
+	location_port?: string | number
+	location_path?: string
+	[key: string]: unknown
+}
+
+interface Template {
+	id: string
+	domain: string
+	connection: Connection
+}
+
+const baseUrl = generateUrl('/apps/integration_davc/admin/templates')
+const protocolOptions = ['https', 'http']
+
+const templates = ref<Template[]>([])
+const editing = ref<Template | null>(null)
+
+const dialogTitle = computed(() => editing.value?.id
+	? t('integration_davc', 'Edit template')
+	: t('integration_davc', 'Add template'))
+
+onMounted(() => {
+	fetchTemplates()
+})
+
+async function fetchTemplates(): Promise<void> {
+	try {
+		const response = await axios.get(baseUrl)
+		templates.value = response.data
+	} catch (error) {
+		showError(t('integration_davc', 'Failed to load service templates'))
+	}
+}
+
+function addTemplate(): void {
+	editing.value = { id: '', domain: '', connection: { location_protocol: 'https' } }
+}
+
+function editTemplate(template: Template): void {
+	editing.value = {
+		id: template.id,
+		domain: template.domain,
+		connection: { ...template.connection },
+	}
+}
+
+function cancelEdit(): void {
+	editing.value = null
+}
+
+function onDialogToggle(value: boolean): void {
+	if (!value) {
+		cancelEdit()
+	}
+}
+
+function endpointSummary(template: Template): string {
+	const protocol = template.connection.location_protocol || 'https'
+	const host = template.connection.location_host || '—'
+	const port = template.connection.location_port ? ':' + template.connection.location_port : ''
+	const path = template.connection.location_path || ''
+	return `${protocol}://${host}${port}${path}`
+}
+
+async function saveTemplate(): Promise<void> {
+	if (editing.value === null) {
+		return
+	}
+	const isNew = editing.value.id === ''
+	const payload = {
+		id: editing.value.id,
+		domain: editing.value.domain,
+		connection: editing.value.connection,
+	}
+	try {
+		const response = await axios.post(`${baseUrl}/${isNew ? 'create' : 'modify'}`, payload)
+		templates.value = response.data
+		editing.value = null
+		showSuccess(t('integration_davc', 'Service template saved'))
+	} catch (error) {
+		showError(t('integration_davc', 'Failed to save service template'))
+	}
+}
+
+async function deleteTemplate(template: Template): Promise<void> {
+	try {
+		const response = await axios.post(`${baseUrl}/delete`, { id: template.id })
+		templates.value = response.data
+	} catch (error) {
+		showError(t('integration_davc', 'Failed to delete service template'))
+	}
+}
+</script>
+
+<template>
+	<div class="davc-templates">
+		<h3 class="davc-templates__title">
+			{{ t('integration_davc', 'Service discovery templates') }}
+		</h3>
+		<p class="settings-hint">
+			{{ t('integration_davc', 'Define endpoint configuration for email domains. When a user connects using an email address, the matching template fills in the server details automatically.') }}
+		</p>
+
+		<ul v-if="templates.length > 0" class="davc-templates__list">
+			<li v-for="template in templates" :key="template.id" class="davc-templates__item">
+				<span class="davc-templates__domain">{{ template.domain }}</span>
+				<span class="davc-templates__endpoint">{{ endpointSummary(template) }}</span>
+				<NcButton variant="tertiary" :aria-label="t('integration_davc', 'Edit')" @click="editTemplate(template)">
+					<template #icon>
+						<PencilIcon :size="20" />
+					</template>
+				</NcButton>
+				<NcButton variant="tertiary" :aria-label="t('integration_davc', 'Delete')" @click="deleteTemplate(template)">
+					<template #icon>
+						<DeleteIcon :size="20" />
+					</template>
+				</NcButton>
+			</li>
+		</ul>
+		<p v-else class="davc-templates__empty">
+			{{ t('integration_davc', 'No service templates defined') }}
+		</p>
+
+		<NcButton @click="addTemplate()">
+			<template #icon>
+				<PlusIcon :size="20" />
+			</template>
+			{{ t('integration_davc', 'Add template') }}
+		</NcButton>
+
+		<NcDialog
+			v-if="editing !== null"
+			:open="true"
+			:name="dialogTitle"
+			size="normal"
+			@update:open="onDialogToggle">
+			<div class="davc-templates__form">
+				<NcTextField
+					v-model="editing.domain"
+					:label="t('integration_davc', 'Email domain')"
+					autocomplete="off"
+					autocorrect="off"
+					autocapitalize="none"
+					:placeholder="t('integration_davc', 'example.com')" />
+				<NcTextField
+					v-model="editing.connection.location_host"
+					:label="t('integration_davc', 'Service address')"
+					autocomplete="off"
+					autocorrect="off"
+					autocapitalize="none"
+					:placeholder="t('integration_davc', 'Domain or IP address')" />
+				<div class="davc-templates__form-field">
+					<label for="davc-template-protocol">
+						{{ t('integration_davc', 'Service protocol') }}
+					</label>
+					<NcSelect
+						v-model="editing.connection.location_protocol"
+						inputId="davc-template-protocol"
+						:options="protocolOptions"
+						:clearable="false" />
+				</div>
+				<NcTextField
+					v-model="editing.connection.location_port"
+					:label="t('integration_davc', 'Service port')"
+					autocomplete="off"
+					autocorrect="off"
+					autocapitalize="none"
+					:placeholder="t('integration_davc', 'Leave empty for default. http (80) https (443)')" />
+				<NcTextField
+					v-model="editing.connection.location_path"
+					:label="t('integration_davc', 'Service path')"
+					autocomplete="off"
+					autocorrect="off"
+					autocapitalize="none"
+					:placeholder="t('integration_davc', 'Leave empty for default path (/.well-known/caldav)')" />
+			</div>
+			<template #actions>
+				<NcButton @click="cancelEdit()">
+					<template #icon>
+						<CloseIcon :size="20" />
+					</template>
+					{{ t('integration_davc', 'Cancel') }}
+				</NcButton>
+				<NcButton variant="primary" @click="saveTemplate()">
+					<template #icon>
+						<CheckIcon :size="20" />
+					</template>
+					{{ t('integration_davc', 'Save') }}
+				</NcButton>
+			</template>
+		</NcDialog>
+	</div>
+</template>
+
+<style scoped lang="scss">
+.davc-templates {
+	margin-top: 30px;
+	padding-top: 20px;
+	border-top: 1px solid var(--color-border);
+
+	.davc-templates__title {
+		font-size: 18px;
+		font-weight: bold;
+		margin-bottom: 8px;
+	}
+
+	.davc-templates__list {
+		list-style: none;
+		padding: 0;
+		margin: 12px 0;
+
+		.davc-templates__item {
+			display: flex;
+			align-items: center;
+			gap: 12px;
+			padding: 8px 0;
+			border-bottom: 1px solid var(--color-border);
+
+			.davc-templates__domain {
+				font-weight: 500;
+				min-width: 200px;
+			}
+
+			.davc-templates__endpoint {
+				flex: 1;
+				color: var(--color-text-maxcontrast);
+				font-size: 13px;
+			}
+		}
+	}
+
+	.davc-templates__empty {
+		color: var(--color-text-maxcontrast);
+		margin: 12px 0;
+	}
+
+	.davc-templates__form {
+		display: flex;
+		flex-direction: column;
+		gap: 16px;
+		padding: 8px 0;
+
+		.davc-templates__form-field {
+			display: flex;
+			flex-direction: column;
+			gap: 4px;
+
+			label {
+				font-weight: 500;
+			}
+		}
+	}
+}
+</style>
diff --git a/src/views/AdminSettings.vue b/src/views/AdminSettings.vue
index 05db140..f21ed47 100644
--- a/src/views/AdminSettings.vue
+++ b/src/views/AdminSettings.vue
@@ -23,6 +23,7 @@ function showError(message: string) {
 
 import { NcButton, NcCheckboxRadioSwitch, NcSelect } from '@nextcloud/vue'
 import CheckIcon from 'vue-material-design-icons/Check.vue'
+import AdminServiceTemplates from '../components/AdminServiceTemplates.vue'
 import DavIcon from '../icons/DavIcon.vue'
 
 // Types
@@ -75,7 +76,7 @@ async function onSaveClick(): Promise<void> {
 	const url = generateUrl('/apps/integration_davc/admin-configuration')
 
 	try {
-		const response: AxiosResponse = await axios.put(url, req)
+		const response: AxiosResponse = await axios.post(url, req)
 		showSuccess(t('integration_davc', 'DAV admin configuration saved'))
 	} catch (error) {
 		const axiosError = error as AxiosError
@@ -129,6 +130,7 @@ async function onSaveClick(): Promise<void> {
 				</NcButton>
 			</div>
 		</div>
+		<AdminServiceTemplates />
 	</div>
 </template>
 
diff --git a/tests/php/database/ServicesTemplateStoreTest.php b/tests/php/database/ServicesTemplateStoreTest.php
new file mode 100644
index 0000000..3a3facf
--- /dev/null
+++ b/tests/php/database/ServicesTemplateStoreTest.php
@@ -0,0 +1,76 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\DAVC\Tests\Database;
+
+use OCA\DAVC\Store\Local\ServicesTemplateStore;
+use OCP\DB\QueryBuilder\IQueryBuilder;
+use OCP\IDBConnection;
+use OCP\Server;
+use PHPUnit\Framework\Attributes\Group;
+use Test\TestCase;
+
+#[Group('DB')]
+class ServicesTemplateStoreTest extends TestCase {
+
+	private IDBConnection $db;
+	private ServicesTemplateStore $store;
+	/** @var string[] */
+	private array $ids = ['davc-test-tpl-1', 'davc-test-tpl-2'];
+
+	protected function setUp(): void {
+		parent::setUp();
+
+		$this->db = Server::get(IDBConnection::class);
+		$this->store = new ServicesTemplateStore($this->db);
+
+		$this->purgeTestData();
+	}
+
+	protected function tearDown(): void {
+		parent::tearDown();
+
+		$this->purgeTestData();
+	}
+
+	private function purgeTestData(): void {
+		$qb = $this->db->getQueryBuilder();
+		$qb->delete('davc_service_templates')
+			->where($qb->expr()->in('id', $qb->createNamedParameter($this->ids, IQueryBuilder::PARAM_STR_ARRAY)))
+			->executeStatement();
+	}
+
+	public function testCreateAndListAndFetchByDomain(): void {
+		$this->store->create('davc-test-tpl-1', 'one.example.test', ['location_host' => 'dav.one.example.test', 'location_protocol' => 'https']);
+		$this->store->create('davc-test-tpl-2', 'two.example.test', ['location_host' => 'dav.two.example.test']);
+
+		$all = $this->store->list();
+		$this->assertIsArray($all);
+		$ours = array_values(array_filter($all, fn (array $row): bool => in_array($row['id'], $this->ids, true)));
+		$this->assertCount(2, $ours);
+
+		$byDomain = $this->store->fetchByDomain('one.example.test');
+		$this->assertCount(1, $byDomain);
+		$connection = json_decode($byDomain[0]['connection'], true);
+		$this->assertSame('dav.one.example.test', $connection['location_host']);
+	}
+
+	public function testModifyAndDelete(): void {
+		$this->store->create('davc-test-tpl-1', 'one.example.test', ['location_host' => 'dav.one.example.test']);
+
+		$this->store->modify('davc-test-tpl-1', 'one.example.test', ['location_host' => 'changed.example.test']);
+		$rows = $this->store->fetchById('davc-test-tpl-1');
+		$this->assertCount(1, $rows);
+		$connection = json_decode($rows[0]['connection'], true);
+		$this->assertSame('changed.example.test', $connection['location_host']);
+
+		$this->store->delete('davc-test-tpl-1');
+		$this->assertCount(0, $this->store->fetchById('davc-test-tpl-1'));
+	}
+}
diff --git a/tests/php/unit/Service/ServicesTemplateServiceTest.php b/tests/php/unit/Service/ServicesTemplateServiceTest.php
new file mode 100644
index 0000000..f604f55
--- /dev/null
+++ b/tests/php/unit/Service/ServicesTemplateServiceTest.php
@@ -0,0 +1,93 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace OCA\DAVC\Tests\Unit\Service;
+
+use OCA\DAVC\Service\ServicesTemplateService;
+use OCA\DAVC\Store\Local\ServicesTemplateStore;
+use OCA\DAVC\Utile\UUID;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+
+class ServicesTemplateServiceTest extends TestCase {
+	private ServicesTemplateStore&MockObject $store;
+
+	private ServicesTemplateService $service;
+
+	protected function setUp(): void {
+		parent::setUp();
+
+		$this->store = $this->createMock(ServicesTemplateStore::class);
+		$this->service = new ServicesTemplateService($this->store);
+	}
+
+	public function testFindByDomainDelegatesToStore(): void {
+		$rows = [['id' => 'a', 'domain' => 'example.com', 'connection' => '{}']];
+		$this->store->expects($this->once())
+			->method('fetchByDomain')
+			->with('example.com')
+			->willReturn($rows);
+
+		$this->assertSame($rows, $this->service->findByDomain('example.com'));
+	}
+
+	public function testListDecodesConnectionJson(): void {
+		$this->store->method('list')->willReturn([
+			['id' => 'a', 'domain' => 'example.com', 'connection' => '{"location_host":"dav.example.com","location_protocol":"https"}'],
+		]);
+
+		$result = $this->service->list();
+
+		$this->assertSame('dav.example.com', $result[0]['connection']['location_host']);
+		$this->assertSame('https', $result[0]['connection']['location_protocol']);
+	}
+
+	public function testListReturnsEmptyConnectionForInvalidJson(): void {
+		$this->store->method('list')->willReturn([
+			['id' => 'a', 'domain' => 'example.com', 'connection' => 'not-json'],
+		]);
+
+		$result = $this->service->list();
+
+		$this->assertSame([], $result[0]['connection']);
+	}
+
+	public function testCreateGeneratesUuidAndDelegates(): void {
+		$connection = ['location_host' => 'dav.example.com'];
+		$this->store->expects($this->once())
+			->method('create')
+			->with(
+				$this->callback(static fn (string $id): bool => UUID::is_valid($id)),
+				'example.com',
+				$connection,
+			)
+			->willReturn(true);
+
+		$this->assertTrue($this->service->create('example.com', $connection));
+	}
+
+	public function testModifyDelegatesToStore(): void {
+		$connection = ['location_host' => 'dav.example.com'];
+		$this->store->expects($this->once())
+			->method('modify')
+			->with('tpl-1', 'example.com', $connection)
+			->willReturn(true);
+
+		$this->assertTrue($this->service->modify('tpl-1', 'example.com', $connection));
+	}
+
+	public function testDeleteDelegatesToStore(): void {
+		$this->store->expects($this->once())
+			->method('delete')
+			->with('tpl-1')
+			->willReturn(true);
+
+		$this->assertTrue($this->service->delete('tpl-1'));
+	}
+}