update flake and add ntfy

modules/system/services/server/default.nix

@@ -15,6 +15,7 @@
     ./nextcloud
     ./nfs
     ./nginx
+    ./ntfy
     ./owncast
     ./transmission
     ./uptime-kuma

modules/system/services/server/nextcloud/default.nix

@@ -19,6 +19,8 @@
         trusted_proxies = [ "127.0.0.1" ];
         trusted_domains = [ config.services.nextcloud.hostName ];
         overwriteprotocol = "https";
+
+        # email
         mail_smtphost = "mx.${config.vars.mailDomain}";
         mail_domain = "${config.vars.primeDomain}";
         mail_from_address = "noreply";

modules/system/services/server/ntfy/default.nix

@@ -0,0 +1,19 @@
+{ config, lib, ... }:
+{
+  imports = [
+    ./nginx
+  ];
+
+  config = lib.mkIf config.services.ntfy-sh.enable {
+    services.ntfy-sh.settings = {
+      base-url = "https://ntfy.${config.vars.primeDomain}";
+      behind-proxy = true;
+      listen-http = ":8811";
+
+      smtp-sender-addr = "mx.${config.vars.mailDomain}:587";
+      smtp-sender-user = "noreply";
+      smtp-sender-pass = config.secrets.mailPass.nixfoxNoReply;
+      smtp-sender-from = "noreply@${config.vars.primeDomain}";
+    };
+  };
+}

modules/system/services/server/ntfy/nginx/default.nix

@@ -0,0 +1,11 @@
+{ config, lib, ... }:
+{
+  services.nginx.virtualHosts."ntfy.${config.vars.primeDomain}" = lib.mkIf config.services.ntfy-sh.enable {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1${config.services.ntfy-sh.settings.listen-http}";
+      proxyWebsockets = true;
+    };
+  };
+}