ntfy: init

modules/nixos/services/homeserver/default.nix

@@ -6,6 +6,7 @@
     ./caddy.nix
     ./cloudflared.nix
     ./nextcloud.nix
+    ./ntfy.nix
     ./restic.nix
     ./sops.nix
     ./uptime-kuma.nix

modules/nixos/services/homeserver/ntfy.nix

@@ -0,0 +1,43 @@
+{ config, ... }:
+
+{
+
+  services.caddy.virtualHosts."ntfy.taild5f7e6.ts.net".extraConfig =
+  assert config.services.caddy.enable;
+  ''
+    import default-settings
+
+    bind tailscale/ntfy
+
+    reverse_proxy localhost:8006
+  '';
+
+  users = {
+    users.ntfy-sh = {
+      isSystemUser = true;
+      group = "ntfy-sh";
+    };
+    groups.ntfy-sh = {};
+  };
+
+  services.ntfy-sh = {
+    enable = true;
+    settings = {
+      base-url = "https://ntfy.taild5f7e6.ts.net";
+      listen-http = ":8006";
+      behind-proxy = true;
+      proxy-trusted-hosts = "127.0.0.1";
+
+      auth-default-access = "deny-all";
+      enable-login = true;
+      require-login = true;
+      auth-access = [
+        "wo2w:*:rw"
+        "*:*:none"
+      ];
+
+      attachment-file-size-limit = "20G";
+      attachment-total-size-limit = "200G";
+    };
+  };
+}