docker-image: docker.0k.io/ntfy:2.8.0  ## from: binwiederhier/ntfy:v2.8.0
data-resources:
  - /var/cache/ntfy
  - /var/lib/ntfy

docker-compose:
  command:
    - serve

default-options:
  auth-default-access: deny-all
  enable-signup: false
  enable-login: true
  enable-reservations: true

uses:
  web-proxy:
    #constraint: required | recommended | optional
    #auto: pair | summon | none ## default: pair
    constraint: recommended
    auto: pair
    solves:
      proxy: "Public access"
    default-options:
      target: !var-expand ${MASTER_BASE_SERVICE_NAME}:80
      apache-custom-rules:
        - !var-expand |

          RewriteEngine On
          RewriteCond %{HTTP:Upgrade} ^websocket$ [NC]
          RewriteCond %{HTTP:Connection} Upgrade [NC]
          RewriteRule /(.*)$ ws://${MASTER_BASE_SERVICE_NAME}:80/\$1 [P,L]


          <If "%{REQUEST_METHOD} == 'GET' && %{HTTPS} == 'off'">
            RedirectMatch permanent "^/([-_A-Za-z0-9]{0,64})$" "https://%{SERVER_NAME}/$1"
          </If>

          SetEnv proxy-nokeepalive 1
          SetEnv proxy-sendchunked 1

          # Higher than the max message size of 4096 bytes
          LimitRequestBody 102400

  backup:
    constraint: recommended
    auto: pair
    solves:
      backup: "Automatic regular backup"
    default-options:
      ## First pattern matching wins, no pattern matching includes.
      ## include-patterns are checked first, then exclude-patterns
      ## Patterns rules:
      ##  - ending / for directory
      ##  - '*' authorized
      ##  - must start with a '/', will start from $SERVICE_DATASTORE
      exclude-patterns:
        - "/var/cache/ntfy/"