summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2023-06-03 15:39:22 +0200
committermakefu <github@syntax-fehler.de>2023-06-03 15:39:22 +0200
commitfb52d696dec21607cc02ad2c43b5ca47a1cc1158 (patch)
tree191b9c31ddb935ad9c640969cd4efb34027e3c71
parentc82c590f191f6c025cc5f6bc33f218e08c5da128 (diff)
ma ntfy: init
-rw-r--r--makefu/2configs/deployment/ntfysh.nix41
1 files changed, 41 insertions, 0 deletions
diff --git a/makefu/2configs/deployment/ntfysh.nix b/makefu/2configs/deployment/ntfysh.nix
new file mode 100644
index 000000000..1a3311d9e
--- /dev/null
+++ b/makefu/2configs/deployment/ntfysh.nix
@@ -0,0 +1,41 @@
+{ lib, config, ... }:
+let
+ web-port = 19455;
+ hostn = "ntfy.euer.krebsco.de";
+ internal-ip = config.krebs.build.host.nets.retiolum.ip4.addr;
+in
+{
+ services.ntfy-sh = {
+ enable = true;
+ settings = {
+ listen-http = "127.0.0.1:${toString web-port}";
+ auth-file = "/var/lib/ntfy-sh/user.db";
+ auth-default-access = "deny-all";
+ behind-proxy = true;
+ attachment-cache-dir = "/media/cloud/ntfy-sh/attachments";
+ attachment-file-size-limit = "500m";
+ attachment-total-size-limit = "100g";
+ base-url = "https://ntfy.euer.krebsco.de";
+ attachment-expiry-duration = "48h";
+ };
+ };
+
+ systemd.services.ntfy-sh.serviceConfig = {
+ StateDirectory = "ntfy-sh";
+ SupplementaryGroups = [ "download" ];
+ };
+
+ services.nginx = {
+ enable = lib.mkDefault true;
+ virtualHosts."${hostn}" = {
+ forceSSL = true;
+ enableACME = true;
+
+ locations."/" = {
+ proxyPass = "http://localhost:${toString web-port}/";
+ proxyWebsockets = true;
+ recommendedProxySettings = true;
+ };
+ };
+ };
+}