35 lines
847 B
Nix
35 lines
847 B
Nix
{
|
|
config,
|
|
service_configs,
|
|
lib,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
(lib.serviceMountWithZpool "ntfy-sh" service_configs.zpool_ssds [
|
|
"/var/lib/private/ntfy-sh"
|
|
])
|
|
(lib.serviceFilePerms "ntfy-sh" [
|
|
"Z /var/lib/private/ntfy-sh 0700 ${config.services.ntfy-sh.user} ${config.services.ntfy-sh.group}"
|
|
])
|
|
];
|
|
|
|
services.ntfy-sh = {
|
|
enable = true;
|
|
|
|
settings = {
|
|
base-url = "https://${service_configs.ntfy.domain}";
|
|
listen-http = "127.0.0.1:${builtins.toString service_configs.ports.private.ntfy.port}";
|
|
behind-proxy = true;
|
|
auth-default-access = "deny-all";
|
|
enable-login = true;
|
|
enable-signup = false;
|
|
};
|
|
};
|
|
|
|
services.caddy.virtualHosts."${service_configs.ntfy.domain}".extraConfig = ''
|
|
reverse_proxy :${builtins.toString service_configs.ports.private.ntfy.port}
|
|
'';
|
|
|
|
}
|