feat(web01): Deploy ntfy-sh on push.dgnum.eu

machines/web01/_configuration.nix

@@ -10,6 +10,7 @@ lib.extra.mkConfig {
     # List of services to enable
     "metis"
     "linkal"
+    "ntfy-sh"
     "plausible"
     "wordpress"
   ];

machines/web01/ntfy-sh.nix

@@ -0,0 +1,26 @@
+_:
+
+let host = "push.dgnum.eu";
+
+in {
+  services.ntfy-sh = {
+    enable = true;
+
+    settings = {
+      base-url = "https://${host}";
+      enable-login = true;
+      behind-proxy = true;
+      manager-interval = "1h";
+    };
+  };
+
+  services.nginx.virtualHosts.${host} = {
+    enableACME = true;
+    forceSSL = true;
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:2586";
+      proxyWebsockets = true;
+    };
+  };
+}

patches/default.nix

@@ -103,5 +103,11 @@
       excludes = [ "nixos/doc/manual/*" ];
       hash = "sha256-Hd3bRYncjnfHzEx+g6rb9cU3YmhF6W3QOtQUuDzw78U=";
     }
+
+    # nixos/ntfy.sh: use dynamic user + add defaults
+    {
+      id = 234811;
+      hash = "sha256-Yz007dCmGl5OxRDMSHv63Ww+LzoQISm9Ttiw0p/6spY=";
+    }
   ];
 }