diff --git a/ddns/compose.yaml b/ddns/compose.yaml
index c56aac0..15b3d3d 100644
--- a/ddns/compose.yaml
+++ b/ddns/compose.yaml
@@ -121,4 +121,13 @@ services:
       - SUBDOMAIN=etf-oglasi
       - PROXIED=false
     restart: always
+  ddns-ntfy:
+    image: oznu/cloudflare-ddns:latest
+    container_name: ddns-ntfy
+    environment:
+      - API_KEY=${API_KEY}
+      - ZONE=${DOMAIN}
+      - SUBDOMAIN=ntfy
+      - PROXIED=false
+    restart: always
    
diff --git a/ntfy/.env.example b/ntfy/.env.example
new file mode 100644
index 0000000..44e8375
--- /dev/null
+++ b/ntfy/.env.example
@@ -0,0 +1,2 @@
+# Base domain used to build ntfy's public URL (https://ntfy.${DOMAIN})
+DOMAIN=example.com
diff --git a/ntfy/compose.yaml b/ntfy/compose.yaml
new file mode 100644
index 0000000..d78fc43
--- /dev/null
+++ b/ntfy/compose.yaml
@@ -0,0 +1,33 @@
+---
+
+services:
+  ntfy:
+    container_name: ntfy
+    image: binwiederhier/ntfy:v2.27.0
+    command: serve
+    environment:
+      - TZ=Etc/UTC
+      - NTFY_BASE_URL=https://ntfy.${DOMAIN}
+      - NTFY_CACHE_FILE=/var/cache/ntfy/cache.db
+      - NTFY_CACHE_DURATION=12h
+      - NTFY_ATTACHMENT_CACHE_DIR=/var/cache/ntfy/attachments
+      - NTFY_AUTH_FILE=/var/lib/ntfy/auth.db
+      - NTFY_AUTH_DEFAULT_ACCESS=deny-all
+      - NTFY_BEHIND_PROXY=true
+    volumes:
+      - /mnt/raid1/data/docker/volumes/ntfy/cache:/var/cache/ntfy
+      - /mnt/raid1/data/docker/volumes/ntfy/lib:/var/lib/ntfy
+    networks:
+      - frontend
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.ntfy.rule=Host(`ntfy.${DOMAIN}`)
+      - traefik.http.routers.ntfy.entrypoints=websecure
+      - traefik.http.routers.ntfy.tls=true
+      - traefik.http.routers.ntfy.tls.certresolver=cloudflare
+      - traefik.http.services.ntfy.loadbalancer.server.port=80
+    restart: always
+
+networks:
+  frontend:
+    external: true