From 20d61d67f8d4697cae3124e1d0887ae60ba7f16a Mon Sep 17 00:00:00 2001
From: Yan Lin <github@yanlincs.com>
Date: Tue, 2 Dec 2025 19:28:39 +0100
Subject: [PATCH] minor fix

---
 modules/claude-code.nix | 14 +++++++-------
 modules/ntfy.nix        |  3 +++
 2 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/modules/claude-code.nix b/modules/claude-code.nix
index a683f2f..f5201ff 100644
--- a/modules/claude-code.nix
+++ b/modules/claude-code.nix
@@ -113,6 +113,13 @@ let
       "Bash(systemctl:*)"
       "Bash(service:*)"
       "Bash(launchctl:*)"
+
+      # Nix system operations
+      "Bash(nixos-rebuild:*)"
+      "Bash(nix-collect-garbage:*)"
+      "Bash(nix-channel:*)"
+      "Bash(oss:*)"
+      "Bash(hms:*)"
     ];
     
     ask = [
@@ -123,13 +130,6 @@ let
       "Bash(cp:*)"
       "Bash(touch:*)"
 
-      # Nix system operations
-      "Bash(nixos-rebuild:*)"
-      "Bash(nix-collect-garbage:*)"
-      "Bash(nix-channel:*)"
-      "Bash(oss:*)"
-      "Bash(hms:*)"
-
       "Bash(curl:*)"
       "Bash(wget:*)"
     ];
diff --git a/modules/ntfy.nix b/modules/ntfy.nix
index c158047..8e278ba 100644
--- a/modules/ntfy.nix
+++ b/modules/ntfy.nix
@@ -25,6 +25,9 @@ in
         listen-http = ":${toString cfg.port}";
         base-url = cfg.baseUrl;
 
+        # iOS push notification support
+        upstream-base-url = "https://ntfy.sh";
+
         # Authentication
         auth-file = "/var/lib/ntfy-sh/user.db";
         auth-default-access = "deny-all";