alpine: add ntfy

flake.nix

@@ -71,6 +71,7 @@
         ./nixos/services/mautrix/whatsapp.nix
         ./nixos/services/mautrix/signal.nix
         ./nixos/services/nextcloud.nix
+        ./nixos/services/ntfy.nix
       ] [];
 
       vm-sway =

hardware/alpine.nix

@@ -140,14 +140,6 @@ in {
         enableACME = true;
         root = "/srv/www/tristans.cloud";
       };
-      "*.thebeanbakery.xyz" = {
-        globalRedirect = "thebeanbakery.xyz";
-      };
-      "thebeanbakery.xyz" = {
-        forceSSL = true;
-        enableACME = true;
-        root = "/srv/www/thebeanbakery.xyz";
-      };
       "auth.tristans.cloud" = {
         forceSSL = true;
         enableACME = true;

nixos/services/ntfy.nix

@@ -0,0 +1,19 @@
+{ config, ... }:
+let
+  domain = "up.${config.networking.domain}";
+  port = 8080;
+in
+{
+  services.ntfy-sh = {
+    enable = true;
+    settings = {
+      base-url = "https://${domain}";
+      listen-http = ":${toString port}";
+    };
+  };
+  services.nginx.virtualHosts.${domain} = {
+    forceSSL = true;
+    enableACME = true;
+    locations."~".proxyPass = "http://localhost:${toString port}";
+  };
+}