feat(service): add ntfy

machines/bomba/secrets.nix

@@ -1,6 +1,23 @@
-{ ... }:
+{ config, ... }:
 {
-  sops.secrets = {
-    nextcloud_password.sopsFile = ../../secrets/bomba.sops.yaml;
+  sops = {
+    secrets = {
+      nextcloud_password = {
+        owner = "nextcloud";
+        sopsFile = ../../secrets/bomba.sops.yaml;
+      };
+      ntfy_users = {
+        owner = "ntfy-sh";
+        sopsFile = ../../secrets/bomba.sops.yaml;
+      };
+      ntfy_access = {
+        owner = "ntfy-sh";
+        sopsFile = ../../secrets/bomba.sops.yaml;
+      };
+    };
+    templates."ntfy.env".content = ''
+      NTFY_AUTH_USERS='${config.sops.placeholder.ntfy_users}'
+      NTFY_AUTH_ACCESS='${config.sops.placeholder.ntfy_access}'
+    '';
   };
 }

machines/bomba/services/default.nix

@@ -1,9 +1,10 @@
 { ... }:
 {
   imports = [
+    # ./nginx.nix
     ./gitea.nix
     ./nextcloud.nix
-    # ./nginx.nix
+    ./ntfy.nix
     ./octoprint.nix
     ./vaultwarden.nix
   ];

machines/bomba/services/nextcloud.nix

@@ -19,6 +19,11 @@
       settings = {
         default_phone_region = "IT";
         overwriteprotocol = "https";
+        mail_domain = "patrickcanal.it";
+        mail_from_address = "nextcloud";
+        mail_smtphost = "127.0.0.1";
+        mail_smtpport = 25;
+        log_type = "file";
         trusted_domains = [
           "nextcloud.patrickcanal.it"
         ];

machines/bomba/services/ntfy.nix

@@ -0,0 +1,16 @@
+{ config, ... }:
+{
+  services.ntfy-sh = {
+    enable = true;
+    environmentFile = config.sops.templates."ntfy.env".path;
+    settings = {
+      listen-http = ":8005";
+      base-url = "https://ntfy.patrickcanal.it";
+      smtp-server-listen = ":25";
+      smtp-server-domain = "patrickcanal.it";
+      behind-proxy = true;
+      enable-login = true;
+      require-login = true;
+    };
+  };
+}