nathan/homelab
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Releases Wiki Activity

fix: switch Ntfy to native auth, remove Authentik ForwardAuth

Browse Source
This commit is contained in:
Nathan 2026-05-31 12:05:34 -04:00
parent cbb63b4cae
commit 2610b5a430
1 changed files with 2 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
nodes/heimdall/ntfy/compose.yaml
View File

@ -8,26 +8,17 @@ services:
- serve
volumes:
- /mnt/appdata/ntfy/data:/var/lib/ntfy
- /mnt/appdata/ntfy/server.yml:/etc/ntfy/server.yml:ro
networks:
- proxy-net
labels:
- "traefik.enable=true"
# Web UI — protected by Authentik
- "traefik.http.routers.ntfy.rule=Host(`ntfy.castaldifamily.com`)"
- "traefik.http.routers.ntfy.entrypoints=websecure"
- "traefik.http.routers.ntfy.tls=true"
- "traefik.http.routers.ntfy.tls.certresolver=cloudflare"
- "traefik.http.routers.ntfy.middlewares=authentik-auth@file"
- "traefik.http.routers.ntfy.service=ntfy"
- "traefik.http.routers.ntfy.priority=1"
# Publish endpoint — POST only, no auth, validated by Ntfy access token
- "traefik.http.routers.ntfy-publish.rule=Host(`ntfy.castaldifamily.com`) && Method(`POST`)"
- "traefik.http.routers.ntfy-publish.entrypoints=websecure"
- "traefik.http.routers.ntfy-publish.tls=true"
- "traefik.http.routers.ntfy-publish.tls.certresolver=cloudflare"
- "traefik.http.routers.ntfy-publish.service=ntfy"
- "traefik.http.routers.ntfy-publish.priority=10"
- "traefik.http.services.ntfy.loadbalancer.server.port=80"
networks:
proxy-net:
external: true