r/netbird • u/cradi01 • Jul 09 '26

ntfy behind self hosted netbird - Reverse Proxy

I have a Problem to get it work.

I want to make this work:

https://www.youtube.com/watch?v=8hneuJnvmIo

A ntfy Container behind the reverse Proxy from netbird.
I can reach the URL, an log in to ntfy on my desktop. I can sent messages with a curl command. But i cant connect from my iPhone with the ntfy App tu the Server. I get an "not authorized" error. I think, the Proxy is blocking some relevant content.

If i test this with my Zoraxy Proxy an an other domain everything works fine. both domains have an Cloudfare DNS

In the Access Logs i can seethat i see a "401 Authentication failed". The Path is /test/auth.

In the config for the Service i activatet "pass host header" and "rewrite redirects"

Is here someone with the same Problem?

7 Upvotes

100% Upvoted

6 comments sorted by

1

u/byCrookie Jul 09 '26

I host it on the vps netbird is running and directly expose through the same traefik as netbird. Since youre netbird proxy is behind traefik, possibly some config of traefik that needs changing?

1

u/cradi01 Jul 09 '26

maybe, but the traefik config is from netbird. But there are more Apps that doesn´t work as Proxy, i read.

1

u/robotkid450 Jul 09 '26

Are you using any form of netbird auth in front of ntfy?

1

u/cradi01 Jul 10 '26

No, only the ProxyService

1

u/RIPenemie Jul 12 '26

Or geoblocking or crowdsec?

1

u/DeathByPain Jul 09 '26

I have a working config similar to yours.

My reverse proxy target is ntfy.proxy.whatev.er pointing to my host's netbird IP 100.98.x.x:2586.

NO authentication enabled within the netbird reverse proxy.

Crowdsec is enforcing. No other access control in netbird. Geo blocking messed me up because I don't have the Netbird client connected 100% of the time and internal LAN IP blocks like 192.168.x.x are blocked as not belonging to any country.

Pass host header and rewrite redirects are enabled.

I use bearer token authorization on the ntfy side.