nathan/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Wiki Activity

Revert "fix: switch Ntfy to native auth, remove Authentik ForwardAuth"

Browse Source 
This reverts commit 2610b5a430bf0738df9749096b626e8cc965c400.
This commit is contained in:
Nathan 2026-05-31 21:43:32 -04:00
parent 1fedfcca01
commit 15894dfc1b
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
nodes/heimdall/ntfy/compose.yaml
View File

@ -8,17 +8,26 @@ services:
- serve
volumes:
- /mnt/appdata/ntfy/data:/var/lib/ntfy
- /mnt/appdata/ntfy/server.yml:/etc/ntfy/server.yml:ro
networks:
- proxy-net
labels:
- "traefik.enable=true"
# Web UI — protected by Authentik
- "traefik.http.routers.ntfy.rule=Host(`ntfy.castaldifamily.com`)"
- "traefik.http.routers.ntfy.entrypoints=websecure"
- "traefik.http.routers.ntfy.tls=true"
- "traefik.http.routers.ntfy.tls.certresolver=cloudflare"
- "traefik.http.routers.ntfy.middlewares=authentik-auth@file"
- "traefik.http.routers.ntfy.service=ntfy"
- "traefik.http.routers.ntfy.priority=1"
# Publish endpoint — POST only, no auth, validated by Ntfy access token
- "traefik.http.routers.ntfy-publish.rule=Host(`ntfy.castaldifamily.com`) && Method(`POST`)"
- "traefik.http.routers.ntfy-publish.entrypoints=websecure"
- "traefik.http.routers.ntfy-publish.tls=true"
- "traefik.http.routers.ntfy-publish.tls.certresolver=cloudflare"
- "traefik.http.routers.ntfy-publish.service=ntfy"
- "traefik.http.routers.ntfy-publish.priority=10"
- "traefik.http.services.ntfy.loadbalancer.server.port=80"
networks:
proxy-net:
external: true