services:
  ntfy_server:
    container_name: ntfy_server
    image: binwiederhier/ntfy:v2.14.0
    restart: unless-stopped
    user: 2002:2002 # ntfy_server:ntfy_server
    command:
      - serve
    volumes:
      - ./config:/etc/ntfy:ro
      - ./data:/var/lib/ntfy:rw
    environment:
      NTFY_BASE_URL: https://ntfy.leaf.home.kappeh.org
      NTFY_CACHE_FILE: /var/lib/ntfy/cache.db
      NTFY_AUTH_FILE: /var/lib/ntfy/auth.db
      NTFY_AUTH_DEFAULT_ACCESS: deny-all
      NTFY_BEHIND_PROXY: true
      NTFY_ATTACHMENT_CACHE_DIR: /var/lib/ntfy/attachments
      NTFY_ENABLE_SIGNUP: false
      NTFY_REQUIRE_LOGIN: true
      NTFY_ENABLE_LOGIN: true
      NTFY_ENABLE_RESERVATIONS: true
      # NTFY_UPSTREAM_BASE_URL: https://ntfy.sh
      # NTFY_WEB_PUSH_PUBLIC_KEY: <public_key>
      # NTFY_WEB_PUSH_PRIVATE_KEY: <private_key>
      # NTFY_WEB_PUSH_FILE: /var/lib/ntfy/webpush.db
      # NTFY_WEB_PUSH_EMAIL_ADDRESS: <email>
      TZ: Etc/UTC
    networks:
      - ntfy_network
    ports:
      - 8146:80

networks:
  ntfy_network:
    driver: bridge