services:
  ntfy:
    image: binwiederhier/ntfy:latest
    restart: unless-stopped
    command:
      - serve
    environment:
      NTFY_BASE_URL: https://${NTFY_HOST}
      NTFY_LISTEN_HTTP: ":${HTTP_PORT}"
      NTFY_BEHIND_PROXY: "true"
      NTFY_AUTH_FILE: /var/lib/ntfy/user.db
      NTFY_AUTH_DEFAULT_ACCESS: deny-all
      NTFY_ENABLE_LOGIN: "true"
      NTFY_REQUIRE_LOGIN: "true"
      NTFY_CACHE_FILE: /var/cache/ntfy/cache.db
      NTFY_CACHE_DURATION: 24h
      NTFY_UPSTREAM_BASE_URL: https://ntfy.sh
      TZ: ${TZ}
    expose:
      - "${HTTP_PORT}"
    volumes:
      - ntfy-data:/var/lib/ntfy
      - ntfy-cache:/var/cache/ntfy
      - ../files/server.yml:/etc/ntfy/server.yml:ro
      - ../files/templates:/etc/ntfy/templates:ro
    healthcheck:
      test: ["CMD-SHELL", "wget -q --tries=1 http://localhost:${HTTP_PORT}/v1/health -O - | grep -Eo '\"healthy\"\\s*:\\s*true' || exit 1"]
      interval: 60s
      timeout: 10s
      retries: 3
      start_period: 40s

volumes:
  ntfy-data:
  ntfy-cache: