services:
  ntfy:
    extends:
      file: ${TEMPLATES_PATH}
      service: default
    container_name: ntfy 
    image: binwiederhier/ntfy 
    ports:
      - "4023:80"
    networks: 
      - ip4net
    command:
      - serve
    volumes:
      - /var/cache/ntfy:/var/cache/ntfy
      - ${INFRA_PATH}/ntfy/config:/etc/ntfy
      - ${INFRA_PATH}/ntfy/data:/var/lib/ntfy
    labels:
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=true'
      # Traefik
      - 'traefik.enable=true'
      - 'traefik.http.routers.ntfy.rule=Host(`ntfy.${PUBLIC_DOMAIN}`)'
      - 'traefik.http.routers.ntfy.entrypoints=https'
      - 'traefik.http.routers.ntfy.tls=true'
      # Middlewares
      - "traefik.http.routers.ntfy.middlewares=crowdsec-bouncer@file"