thunderbottom/flakes
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: add module for ntfy service

Browse Source 
Signed-off-by: Chinmay D. Pai <chinmaydpai@gmail.com>
This commit is contained in:
Chinmay D. Pai 2024-09-29 23:24:14 +05:30
parent fe14cb6753
commit 5b2cea38f9
Signed by: thunderbottom
GPG Key ID: 75507BE256F40CED
1 changed files with 61 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

61
modules/nixos/services/ntfy-sh/default.nix Normal file
View File

@ -0,0 +1,61 @@
{
config,
lib,
...
}: {
options.snowflake.services.ntfy-sh = {
enable = lib.mkEnableOption "Enable ntfy-sh service";
domain = lib.mkOption {
type = lib.types.str;
default = "";
description = "Configuration domain to use for the ntfy-sh service";
};
listenPort = lib.mkOption {
type = lib.types.int;
description = "Configuration port for the ntfy-sh service to listen on";
default = 8082;
};
};
config = let
cfg = config.snowflake.services.ntfy-sh;
in
lib.mkIf cfg.enable {
services.ntfy-sh.enable = true;
services.ntfy-sh.settings = {
base-url = "https://${cfg.domain}";
upstream-base-url = "https://ntfy.sh";
listen-http = "127.0.0.1:${toString cfg.listenPort}";
behind-proxy = true;
auth-default-access = "deny-all";
enable-login = true;
enable-signup = false;
enable-reservations = true;
};
services.nginx = {
virtualHosts = {
"${cfg.domain}" = {
serverName = "${cfg.domain}";
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://${config.services.ntfy-sh.settings.listen-http}";
extraConfig = ''
proxy_redirect off;
proxy_buffering off;
proxy_request_buffering off;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
client_max_body_size 0;
'';
};
};
};
};
};
}