Ntfy: add auth support

[aine-etke]

Is your feature request related to a problem? Please describe. Current ntfy implementation doesn't enforce auth, so literally anybody can use a ntfy server installed with the playbook

Describe the solution you'd like Provide a way to configure auth, ref: https://unifiedpush.org/users/distributors/ntfy/#limit-access-to-some-users and https://ntfy.sh/docs/config/#users-and-roles

Describe alternatives you've considered N/A

Additional context https://github.com/spantaleev/matrix-docker-ansible-deploy/commit/e4cbdd56d850ebaedcd85d201a1cdb1a71437621

[aine-etke]

ping @julianfoad

[Happyfeet01]

when i try to add an User i got this

docker exec matrix-ntfy ntfy user list 
option auth-file not set; auth is unconfigured for this server

i think the authfile is set in the main.yml. But found no Variable

i have a look here: https://ntfy.sh/docs/config/?h=auth+file#access-control-list-acl The File must exsist at "/var/lib/ntfy/user.db"

Maybe auth-file: "/var/lib/ntfy/auth.db" helps?

[mygitcrazy]

Just curious... But anybody figured out how to put any authentication to ntfy in the meantime?

[tommes0815]

Hey, I enabled basic auth although it is a bit limited due to unified push which does not support ntfys auth system. Basically, my ntfy instance is secured such that only authenticated users can read/publish to any topic and, in addition, anyone can write to unified push topics (topics which start with "up").

I basically followed: https://unifiedpush.org/users/distributors/ntfy/

I added the following to my vars.yml for the playbook:

matrix_ntfy_container_extra_arguments:
  - '--mount type=bind,src=/matrix/ntfy/databases,dst=/var/lib/ntfy'
  
matrix_ntfy_configuration_extension_yaml: |
  web-root: disable
  log_level: DEBUG
  auth-file: "/var/lib/ntfy/user.db"
  auth-default-access: "deny-all"

Afterwards, I opened a shell (docker exec -it ID_OF_NTFY_DOCKER sh ) and added a ntfy admin user and the access rule for unified push.

[mygitcrazy]

Hey, I enabled basic auth although it is a bit limited due to unified push which does not support ntfys auth system. Basically, my ntfy instance is secured such that only authenticated users can read/publish to any topic and, in addition, anyone can write to unified push topics (topics which start with "up").

I basically followed: https://unifiedpush.org/users/distributors/ntfy/

I added the following to my vars.yml for the playbook:

matrix_ntfy_container_extra_arguments:
  - '--mount type=bind,src=/matrix/ntfy/databases,dst=/var/lib/ntfy'
  
matrix_ntfy_configuration_extension_yaml: |
  web-root: disable
  log_level: DEBUG
  auth-file: "/var/lib/ntfy/user.db"
  auth-default-access: "deny-all"

Afterwards, I opened a shell (docker exec -it ID_OF_NTFY_DOCKER sh ) and added a ntfy admin user and the access rule for unified push.

Thanks for the clear explanation and write up on how you did that. Very much appreciated 🙏 👍