feat(webhooks): add ntfy-token preset for authenticated ntfy access#409
Merged
feat(webhooks): add ntfy-token preset for authenticated ntfy access#409
Conversation
Add a new ntfy-token preset that includes Bearer token authentication for self-hosted ntfy instances or private topics. The existing ntfy preset remains for public topics without authentication. Changes: - Add middlewares/presets/ntfy-token.yaml with Authorization header - Update ntfy.yaml to clarify it's for public topics only - Remove unused secret variable from ntfy preset - Update documentation with examples for both presets - Add tests for ntfy-token preset Closes #407 (partial - authentication support)
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
3 tasks
github-merge-queue bot
pushed a commit
that referenced
this pull request
Dec 22, 2025
## Summary Updates CHANGELOG.md with release notes for v0.17.0 including: - **Secure Web Authentication** (#408) - **Doctor Command Enhancements** (#408) - **ntfy-token Preset** (#409) - **Webhook Host Whitelist** (#410) - **CronClock Interface** (#412) - **Cookie Security Hardening** (#411) - **GitHub Actions Pinning** (#411) - **Test Infrastructure Improvements** (#412) - **Performance Optimizations** (#412) - **Linting Audit** (#413) ## Test Plan - [x] Changelog follows Keep a Changelog format - [x] All PR references are correct - [x] Date is correct (2025-12-22)
Member
Author
|
🚀 Released in v0.17.0 Thank you for your contribution! 🙏 This is now available in the latest release. Please test and verify everything works as expected in your environment. If you encounter any issues, please open a new issue. |
github-merge-queue bot
pushed a commit
that referenced
this pull request
Dec 22, 2025
## Summary Adds links to PRs and Issues in each release's notes, making it easy for users to see what changed. ### Changes 1. **Workflow update**: The `notify-released` job now adds an "Included in this release" section with: - Links to all merged PRs labeled with `released:vX.Y.Z` - Links to all closed Issues labeled with `released:vX.Y.Z` 2. **Backfill script**: `scripts/update-release-notes.sh` updates past release notes ### Example output in release notes ```markdown --- ## Included in this release ### Pull Requests - [#408](#408) feat: secure web auth - [#409](#409) feat: ntfy-token preset ### Issues - [#407](#407) Add token auth for ntfy ``` ## Test Plan - [x] Dry-run script tested - [ ] Run update script after merge to backfill all releases
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
ntfy-tokenpreset with Bearer token authentication for self-hosted ntfy instances or private topicsntfypreset is for public topics onlysecretvariable from thentfypreset (it was defined but never used in headers)Changes
middlewares/presets/ntfy-token.yamlAuthorization: Bearer {secret}headermiddlewares/presets/ntfy.yamldocs/webhooks.mdmiddlewares/preset_test.goUsage
Public topics (no auth):
Private topics or self-hosted with tokens:
Related
Partially addresses #407 - This PR adds authentication support for ntfy. A separate PR will address the private network access (SSRF) configuration.
Test plan
ntfy-tokenpreset loads correctlyntfypreset correctly excludes Authorization header