services:
  ntfy:
    image: binwiederhier/ntfy:latest
    container_name: ntfy
    restart: unless-stopped
    command: serve
    environment:
      - TZ=${TZ:-Europe/Berlin}
      - NTFY_BASE_URL=${BASE_URL:-http://localhost:8097}
      # Set to true only when a reverse proxy sits in front (fixes client IPs).
      - NTFY_BEHIND_PROXY=${BEHIND_PROXY:-false}
      - NTFY_CACHE_FILE=/var/cache/ntfy/cache.db
      - NTFY_AUTH_FILE=/var/lib/ntfy/user.db
      # "read-write" is an open server; use "deny-all" plus `ntfy user add` for a private one.
      - NTFY_AUTH_DEFAULT_ACCESS=${DEFAULT_ACCESS:-deny-all}
      - NTFY_ENABLE_LOGIN=true
    ports:
      - "${HTTP_PORT:-8097}:80"
    volumes:
      - ${DATA_PATH:-/srv/ntfy}/cache:/var/cache/ntfy
      - ${DATA_PATH:-/srv/ntfy}/lib:/var/lib/ntfy