+1

machines/fovps/services/default.nix

reviewed

··· 6 6 ./cloudlog.nix 7 7 ./minecraft.nix 8 8 ./synapse.nix 9 9 + ./ntfy-sh.nix 9 10 ]; 10 11 }

+25

machines/fovps/services/ntfy-sh.nix

reviewed

··· 1 1 + { pkgs, config, ... }: 2 2 + 3 3 + let 4 4 + domain = "ntfy.yip.eeep.ee"; 5 5 + 6 6 + ntfy = config.services.ntfy-sh; 7 7 + in 8 8 + { 9 9 + services.ntfy-sh.enable = true; 10 10 + 11 11 + services.ntfy-sh.settings = { 12 12 + base-url = "https://${domain}"; 13 13 + behind-proxy = true; 14 14 + auth-default-access = "deny-all"; # sorry 15 15 + }; 16 16 + systemd.services.ntfy-sh.postStart = '' 17 17 + # unifiedpush write-only access for everyone 18 18 + ${ntfy.package}/bin/ntfy access '*' 'up*' write-only 19 19 + ''; 20 20 + 21 21 + services.caddy.enable = true; 22 22 + services.caddy.virtualHosts."https://${domain}".extraConfig = '' 23 23 + reverse_proxy * ${ntfy.settings.listen-http} 24 24 + ''; 25 25 + }