Add some secrets to ntfy

This commit is contained in:
Natsu Kagami 2025-04-25 21:15:17 +02:00
parent 9f67cf5ab1
commit 32e36051b0
Signed by: nki
GPG key ID: 55A032EB38B49ADB
3 changed files with 50 additions and 37 deletions

View file

@ -33,6 +33,7 @@
./outline.nix
./vikunja.nix
./n8n.nix
./ntfy.nix
./grist.nix
];
@ -246,35 +247,6 @@
dataDir = "/mnt/data/grist";
};
# ntfy
cloud.traefik.hosts.ntfy-sh = {
host = "ntfy.nkagami.me";
port = 11161;
noCloudflare = true;
};
services.ntfy-sh = {
enable = true;
settings = {
listen-http = "127.0.0.1:11161";
cache-file = "/var/lib/ntfy-sh/cache.db";
auth-file = "/var/lib/ntfy-sh/auth.db";
auth-default-access = "deny-all";
behind-proxy = true;
base-url = "https://ntfy.nkagami.me";
attachment-cache-dir = "/var/lib/ntfy-sh/attachments";
enable-login = true;
enable-reservations = true;
upstream-base-url = "https://ntfy.sh";
};
};
systemd.services.ntfy-sh.serviceConfig = {
WorkingDirectory = "/var/lib/ntfy-sh";
StateDirectory = "ntfy-sh";
};
systemd.services.ntfy-sh.preStart = ''
mkdir -p /var/lib/ntfy-sh/attachments
'';
# Trust my own cert
security.pki.certificateFiles = [ ../nki-home/cert.pem ];
}