services:
  ntfy:
    image: binwiederhier/ntfy@sha256:b32b4221a64ec2e7c000f0782b2feef24022e1a09a24e531640f4cbba6cfa1e6
    container_name: ntfy
    restart: unless-stopped
    dns:                       
      - 1.1.1.1                
      - 8.8.8.8                

    command:
      - serve

    environment:
      NTFY_BASE_URL: https://ntfy.kaleschke.info
      NTFY_UPSTREAM_BASE_URL: https://ntfy.sh
      NTFY_BEHIND_PROXY: "true"

    volumes:
      - /mnt/user/appdata/ntfy:/var/lib/ntfy

    networks:
      - frontend_net

    security_opt:
      - no-new-privileges:true

    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.ntfy.rule=Host(`ntfy.kaleschke.info`)
      - traefik.http.routers.ntfy.entrypoints=websecure
      - traefik.http.routers.ntfy.tls=true
      - traefik.http.routers.ntfy.tls.certresolver=le
      - traefik.http.services.ntfy.loadbalancer.server.port=80

networks:
  frontend_net:
    external: true