NixOS/system/services/ntfy-sh.nix

78 lines
2 KiB
Nix
Raw Normal View History

2024-09-05 09:42:15 +07:00
{ config, pkgs, lib, ... }:
let
cfg = config.profile.services.ntfy-sh;
client = cfg.client;
2024-09-05 09:42:15 +07:00
inherit (lib) mkIf;
domain = "ntfy.tigor.web.id";
listenAddress = "0.0.0.0:15150";
2024-09-05 09:42:15 +07:00
in
lib.mkMerge [
(mkIf cfg.enable {
2024-09-05 09:42:15 +07:00
services.caddy.virtualHosts.${domain}.extraConfig = ''
reverse_proxy ${listenAddress}
2024-09-05 09:42:15 +07:00
'';
services.ntfy-sh = {
enable = true;
settings =
let
base-dir = "/var/lib/ntfy-sh";
in
rec {
listen-http = listenAddress;
behind-proxy = true;
base-url = "https://${domain}";
# Performance. Cache and Batching.
cache-file = "${base-dir}/cache.db";
cache-duration = "24h";
cache-batch-size = 10;
cache-batch-timeout = "1s";
# Auth
auth-file = "${base-dir}/auth.db";
auth-default-access = "deny-all";
# Attachments
attachment-cache-dir = "${base-dir}/attachments";
attachment-expiry-duration = cache-duration;
};
};
})
(mkIf client.enable {
2024-09-05 09:42:15 +07:00
environment.systemPackages = with pkgs; [
# Access to `ntfy` cli tool
ntfy-sh
];
environment.sessionVariables = {
NTFY_CONFIG = "/etc/ntfy/client.yml";
};
2024-09-05 11:33:50 +07:00
sops = {
secrets =
let
opts = { sopsFile = ../../secrets/ntfy.yaml; };
in
{
"ntfy/default/user" = opts;
"ntfy/default/password" = opts;
};
templates =
let filename = "ntfy-client.yaml"; in
{
${filename} = {
content = builtins.readFile ((pkgs.formats.yaml { }).generate filename {
default-host = "https://${domain}";
default-user = config.sops.placeholder."ntfy/default/user";
default-password = config.sops.placeholder."ntfy/default/password";
});
path = "/etc/ntfy/client.yml";
owner = config.profile.user.name;
};
};
};
})
]