minor fix

modules/claude-code.nix

@@ -113,6 +113,13 @@ let
       "Bash(systemctl:*)"
       "Bash(service:*)"
       "Bash(launchctl:*)"
+
+      # Nix system operations
+      "Bash(nixos-rebuild:*)"
+      "Bash(nix-collect-garbage:*)"
+      "Bash(nix-channel:*)"
+      "Bash(oss:*)"
+      "Bash(hms:*)"
     ];
     
     ask = [
@@ -123,13 +130,6 @@ let
       "Bash(cp:*)"
       "Bash(touch:*)"
 
-      # Nix system operations
-      "Bash(nixos-rebuild:*)"
-      "Bash(nix-collect-garbage:*)"
-      "Bash(nix-channel:*)"
-      "Bash(oss:*)"
-      "Bash(hms:*)"
-
       "Bash(curl:*)"
       "Bash(wget:*)"
     ];

modules/ntfy.nix

@@ -25,6 +25,9 @@ in
         listen-http = ":${toString cfg.port}";
         base-url = cfg.baseUrl;
 
+        # iOS push notification support
+        upstream-base-url = "https://ntfy.sh";
+
         # Authentication
         auth-file = "/var/lib/ntfy-sh/user.db";
         auth-default-access = "deny-all";