---

services:
  ntfy:
    container_name: ntfy
    image: binwiederhier/ntfy:v2.27.0
    command: serve
    environment:
      - TZ=Etc/UTC
      - NTFY_BASE_URL=https://ntfy.${DOMAIN}
      - NTFY_CACHE_FILE=/var/cache/ntfy/cache.db
      - NTFY_CACHE_DURATION=12h
      - NTFY_ATTACHMENT_CACHE_DIR=/var/cache/ntfy/attachments
      - NTFY_AUTH_FILE=/var/lib/ntfy/auth.db
      - NTFY_AUTH_DEFAULT_ACCESS=deny-all
      - NTFY_BEHIND_PROXY=true
    volumes:
      - /mnt/raid1/data/docker/volumes/ntfy/cache:/var/cache/ntfy
      - /mnt/raid1/data/docker/volumes/ntfy/lib:/var/lib/ntfy
    networks:
      - frontend
    labels:
      - traefik.enable=true
      - traefik.http.routers.ntfy.rule=Host(`ntfy.${DOMAIN}`)
      - traefik.http.routers.ntfy.entrypoints=websecure
      - traefik.http.routers.ntfy.tls=true
      - traefik.http.routers.ntfy.tls.certresolver=cloudflare
      - traefik.http.services.ntfy.loadbalancer.server.port=80
    restart: always

networks:
  frontend:
    external: true