ntfy

hosts/ds9/containers.nix

@@ -379,11 +379,7 @@ in
             /data/media/copyparty/srv
             accs:
               A: @admin
-          [/noauth]  # accessible without auth public
-            /data/media/copyparty/srv/noauth
-            accs:
-              A: @admin
-              g: *
+              r: *
           [/dump]
             /data/media/copyparty/srv/dump
             flags:

hosts/ds9/default.nix

@@ -289,26 +289,29 @@ in
       }
       @copyparty host c.hailsatan.eu
       handle @copyparty {
-        @proxy {
-          header_regexp Cookie authentik_proxy_([a-zA-Z0-9])
-        }
-        handle @proxy {
-          import podmanRedirWithAuth http://copyparty:3923
-        }
+        # @proxy {
+        #   header_regexp Cookie authentik_proxy_([a-zA-Z0-9])
+        # }
+        # handle @proxy {
+        #   import podmanRedirWithAuth http://copyparty:3923
+        # }
         handle /shr/* {
           import podmanRedir http://copyparty:3923
         }
-        @noauth {
-          path_regexp ^\/(noauth(\/.*|)|[a-z.]+\.(css|js)|[1-9].png)$
-        }
-        @getoptionshead {
-          method GET OPTIONS HEAD
-        }
-        handle @noauth {
-          handle @getoptionshead {
-            import podmanRedir http://copyparty:3923
-          }
+        handle /.cpr/* {
+          import podmanRedir http://copyparty:3923
         }
+        # @noauth {
+        #   path_regexp ^\/(noauth(\/.*|)|[a-z.]+\.(css|js)|[1-9].png)$
+        # }
+        # @getoptionshead {
+        #   method GET OPTIONS HEAD
+        # }
+        # handle @noauth {
+        #   handle @getoptionshead {
+        #     import podmanRedir http://copyparty:3923
+        #   }
+        # }
         handle {
           import podmanRedirWithAuth http://copyparty:3923
         }

hosts/picard/default.nix

@@ -19,6 +19,7 @@
     ./obsidianshare.nix
     ./mail.nix
     ./gotosocial.nix
+    ./ntfy.nix
     # ./ts-ovpn.nix
 
     ../../nixos-modules/system/persist.nix
@@ -217,6 +218,10 @@
       handle @notes {
         reverse_proxy http://127.0.0.1:8086
       }
+      @ntfy host ntfy.xyno.systems
+      handle @ntfy {
+        reverse_proxy http://127.0.0.1:15992
+      }
 
       handle {
         abort

hosts/picard/ntfy.nix

@@ -0,0 +1,11 @@
+{pkgs,config,lib,...}:{
+  services.ntfy-sh = {
+    enable = true;
+    settings.base-url = "https://nfty.xyno.systems";
+    settings.behind-proxy = true;
+    settings.listen-http = ":15992";
+  };
+  ragon.persist.extraDirectories = [
+    "/var/cache/ntfy"
+  ];
+}

hosts/picard/xynospace-matrix.nix

@@ -76,6 +76,10 @@ in
         settings.database.name = "psycopg2";
         settings.database.args.database = "matrix-synapse-xynospace";
         settings.database.args.host = hostAddress;
+        settings.ip_range_whitelist = [
+          "2a03:4000:6:8120::1/128"
+          "37.120.178.81/32"
+        ];
         settings.database.args.password = "synapse";
         settings.app_service_config_files = [
           "/var/lib/signalbot.yaml"