ntfy

clusters/base/apps/ntfy/helmrelease.yaml

@@ -0,0 +1,87 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: ntfy
+  namespace: notify
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: ntfy
+  driftDetection:
+    mode: enabled
+  values:
+    controllers:
+      ntfy:
+        containers:
+          app:
+            image:
+              repository: binwiederhall/ntfy
+              tag: v2.14.0
+            args:
+              - serve
+            env:
+              NTFY_BASE_URL: https://notify.aggtaa.com
+              NTFY_LISTEN_HTTP: ":80"
+              NTFY_BEHIND_PROXY: "true"
+              NTFY_CACHE_FILE: /var/lib/ntfy/cache.db
+              NTFY_AUTH_FILE: /var/lib/ntfy/user.db
+              NTFY_AUTH_DEFAULT_ACCESS: deny-all
+              NTFY_ATTACHMENT_CACHE_DIR: /var/lib/ntfy/attachments
+              NTFY_ENABLE_LOGIN: "true"
+            probes:
+              liveness:
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /v1/health
+                    port: 80
+              readiness:
+                enabled: true
+                custom: true
+                spec:
+                  httpGet:
+                    path: /v1/health
+                    port: 80
+            resources:
+              requests:
+                cpu: 10m
+                memory: 32Mi
+              limits:
+                memory: 256Mi
+
+    service:
+      app:
+        controller: ntfy
+        ports:
+          http:
+            port: 80
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: notify.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: ntfy-tls
+            hosts:
+              - notify.aggtaa.com
+
+    persistence:
+      data:
+        type: persistentVolumeClaim
+        storageClass: longhorn
+        accessMode: ReadWriteOnce
+        size: 2Gi
+        retain: true
+        globalMounts:
+          - path: /var/lib/ntfy

clusters/base/apps/ntfy/helmrepository.yaml

@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: ntfy
+  namespace: notify
+spec:
+  interval: 1h
+  url: oci://ghcr.io/bjw-s-labs/helm/app-template
+  ref:
+    tag: "5.0.1"

clusters/base/apps/ntfy/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - helmrelease.yaml

clusters/base/namespaces/notify.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: notify

clusters/home/apps/kustomization.yaml

@@ -20,3 +20,4 @@ resources:
   - woodpecker.yaml
   - tinyauth.yaml
   - it-tools.yaml
+  - ntfy.yaml

clusters/home/apps/ntfy.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: ntfy
+  namespace: flux-system
+spec:
+  interval: 10m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./clusters/base/apps/ntfy
+  prune: true
+  wait: true
+  dependsOn:
+    - name: namespaces
+    - name: infra
+  retryInterval: 5s

clusters/home/namespaces/kustomization.yaml

@@ -20,3 +20,4 @@ resources:
   - ../../base/namespaces/dev.yaml
   - ../../base/namespaces/ci.yaml
   - ../../base/namespaces/tools.yaml
+  - ../../base/namespaces/notify.yaml