add ntfy module

hosts/nixos/vps/proxy.nix

@@ -66,6 +66,18 @@
           };
         };
 
+        # ntfy notification service
+        ntfy = {
+          rule = "Host(`ntfy.yanlincs.com`)";
+          service = "ntfy";
+          tls = {
+            certResolver = "cloudflare";
+            domains = [{
+              main = "*.yanlincs.com";
+            }];
+          };
+        };
+
       };
 
       services = {
@@ -115,6 +127,15 @@
           };
         };
 
+        # ntfy backend
+        ntfy = {
+          loadBalancer = {
+            servers = [{
+              url = "http://localhost:8080";
+            }];
+          };
+        };
+
       };
 
     };

hosts/nixos/vps/system.nix

@@ -9,6 +9,7 @@
     ../../../modules/traefik.nix
     ../../../modules/borg/client.nix
     ../../../modules/login-display.nix
+    ../../../modules/ntfy.nix
   ];
 
   # GRUB bootloader with UEFI support

modules/ntfy.nix

@@ -0,0 +1,49 @@
+{ config, pkgs, lib, ... }:
+
+let
+  cfg = config.services.ntfy-custom;
+in
+{
+  options.services.ntfy-custom = {
+    port = lib.mkOption {
+      type = lib.types.port;
+      default = 8080;
+      description = "Port for ntfy to listen on";
+    };
+
+    baseUrl = lib.mkOption {
+      type = lib.types.str;
+      default = "https://ntfy.yanlincs.com";
+      description = "Base URL for ntfy server";
+    };
+  };
+
+  config = {
+    services.ntfy-sh = {
+      enable = true;
+      settings = {
+        listen-http = ":${toString cfg.port}";
+        base-url = cfg.baseUrl;
+
+        # Authentication
+        auth-file = "/var/lib/ntfy-sh/user.db";
+        auth-default-access = "deny-all";
+
+        # File attachments
+        attachment-cache-dir = "/var/lib/ntfy-sh/attachments";
+      };
+    };
+
+    # Ensure required directories exist
+    systemd.tmpfiles.rules = [
+      "d /var/lib/ntfy-sh 0755 ntfy-sh ntfy-sh -"
+      "d /var/lib/ntfy-sh/attachments 0755 ntfy-sh ntfy-sh -"
+    ];
+  };
+}
+
+# NOTE: After deployment, manage users via ntfy CLI:
+#   sudo ntfy user add <username>
+#   sudo ntfy user change-pass <username>
+#   sudo ntfy access <username> <topic> <read-write|read-only|write-only|deny-all>
+#   Example: sudo ntfy access alice "*" read-write