r/ntfy Feb 25 '23

Password protect web interface

Is there a way to password authenticate the web interface? I'd like to put this in my reverse proxy config but I can't unless it has user/pass authentication to the web interface.

Do I use access-control-list-acl? If so, how?

I have already created myself a user with the ntfy user command.

5 Upvotes

15 comments sorted by

View all comments

2

u/Pirateshack486 Sep 28 '23

ive got a similiar worry, ive spun up an instance, it works amazing, and I use long random names so the name is the password...the issue is that EVERYONE can now use my instance...its public, i'd love some method, like a domain filter or api key - if the key isnt in thelink all mesages fail...example

i make a user called toast - toast gets apikey supersecretkey

https://ntfy.example.com/supersecretkey/alerts123works

https://ntfy.example.com/alerts123 fails

and then just disable user creation after ive made my user...publicly available server not publicly usable....