Ntfy setup

flake.nix

@@ -212,6 +212,7 @@
               ./instances/freya/configuration.nix
 
               ./modules/nixos/nextcloud.nix
+              ./modules/nixos/ntfy.nix
             ] ++ homeManagerModules ++ [
               { home-manager.users.bertof = import ./instances/freya/hm.nix; }
             ];

instances/baldur/configuration.nix

@@ -86,6 +86,15 @@
               proxy_buffering off;
             '';
           };
+          "ntfy.bertof.net" = ssl // {
+            locations."/" = {
+              proxyPass = "http://freya.tsn:7080/";
+              proxyWebsockets = true;
+              extraConfig = ''
+                client_max_body_size 5g;
+              '';
+            };
+          };
           "my-nextcloud.bertof.net" = ssl // {
             locations."/" = {
               proxyPass = "http://freya.tsn:80/";

modules/hm/__basic.nix

@@ -2,9 +2,7 @@
   home = {
     language.base = "it_IT.UTF-8";
     packages = builtins.attrValues {
-      inherit (pkgs)
-        fd file htop mmv-go neofetch nixos-option pv ripgrep unrar unzip wget
-        xclip yq zip;
+      inherit (pkgs) fd file htop mmv-go neofetchnixos-optionntfy-shpvripgrepunrarunzipwget xclip yq zip;
     };
   };
 

modules/nixos/ntfy.nix

@@ -0,0 +1,16 @@
+let
+  port = 7080;
+in
+{
+  services.ntfy-sh = {
+    enable = true;
+    settings = {
+      listen-http = ":${toString port}";
+      base-url = "https://ntfy.bertof.net";
+      behind-proxy = true;
+      auth-default-access = "deny-all";
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ port ];
+}