services:
  ntfy:
    image: binwiederhier/ntfy:latest
    container_name: ntfy
    restart: unless-stopped

    command:
      - serve

    environment:
      NTFY_UPSTREAM_BASE_URL: https://ntfy.sh
      NTFY_BEHIND_PROXY: "true"

    volumes:
      - /mnt/user/appdata/ntfy:/var/lib/ntfy

    networks:
      - frontend_net

    security_opt:
      - no-new-privileges:true

    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.ntfy.rule=Host(`ntfy.kaleschke.info`)
      - traefik.http.routers.ntfy.entrypoints=websecure
      - traefik.http.routers.ntfy.tls=true
      - traefik.http.routers.ntfy.tls.certresolver=le
      - traefik.http.services.ntfy.loadbalancer.server.port=80

networks:
  frontend_net:
    external: true