From d8bceae6e86bbf29276b16568f63c1dbaf1190fc Mon Sep 17 00:00:00 2001
From: marthsincemelee <fin.markwitz@smoothcloud.de>
Date: Sun, 5 Jul 2026 12:37:33 +0200
Subject: [PATCH] feat(ntfy): add self-hosted notification server module

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 machines/jupiter/environments.nix     |  1 +
 modules/environments/default.nix      |  1 +
 modules/environments/ntfy/default.nix | 57 +++++++++++++++++++++++++++
 3 files changed, 59 insertions(+)
 create mode 100644 modules/environments/ntfy/default.nix

diff --git a/machines/jupiter/environments.nix b/machines/jupiter/environments.nix
index c2ba90d..7a23314 100644
--- a/machines/jupiter/environments.nix
+++ b/machines/jupiter/environments.nix
@@ -23,6 +23,7 @@ in
     jellyseerr.enable = true;
     development.enable = true;
     home-assistant.enable = true;
+    ntfy.enable = true;
 
     homepage.enable = true;
     paperless = {
diff --git a/modules/environments/default.nix b/modules/environments/default.nix
index eb0d299..46ff4e2 100644
--- a/modules/environments/default.nix
+++ b/modules/environments/default.nix
@@ -7,6 +7,7 @@
     ./claude-code
     ./development
     ./home-assistant
+    ./ntfy
     ./hyprland
     ./zsh
     ./paperless
diff --git a/modules/environments/ntfy/default.nix b/modules/environments/ntfy/default.nix
new file mode 100644
index 0000000..36bce1a
--- /dev/null
+++ b/modules/environments/ntfy/default.nix
@@ -0,0 +1,57 @@
+# self-hosted push notification server (ntfy)
+{
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.my.profiles.ntfy;
+  hostName = config.networking.hostName;
+in
+{
+  options.my.profiles.ntfy = with lib; {
+    enable = mkEnableOption "ntfy notification server";
+
+    port = mkOption {
+      type = types.port;
+      default = 2586;
+      description = "HTTP port ntfy listens on.";
+    };
+
+    topic = mkOption {
+      type = types.str;
+      default = "ha";
+      description = "Topic Home Assistant publishes notifications to.";
+    };
+
+    haIntegration.enable = mkOption {
+      type = types.bool;
+      default = true;
+      description = "Wire a Home Assistant rest_command that publishes to ntfy.";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.ntfy-sh = {
+      enable = true;
+      settings = {
+        base-url = "http://${hostName}:${toString cfg.port}";
+        listen-http = ":${toString cfg.port}";
+        auth-file = "/var/lib/ntfy-sh/user.db";
+        auth-default-access = "deny-all";
+      };
+    };
+
+    networking.firewall.allowedTCPPorts = [ cfg.port ];
+
+    my.homepage.services = [
+      {
+        group = "Services";
+        name = "ntfy";
+        description = "Push notifications";
+        href = "http://${hostName}:${toString cfg.port}";
+        icon = "ntfy.svg";
+      }
+    ];
+  };
+}