{ ... }:
{
  services.caddy.virtualHosts."ntfy.ily.rs" = {
    extraConfig = ''
      reverse_proxy localhost:8082
      encode zstd gzip
    '';
  };

  virtualisation.oci-containers.containers.ntfy = {
    image = "binwiederhier/ntfy:v2.13.0";
    podman.user = "podman";
    cmd = [ "serve" ];
    ports = [ "127.0.0.1:8082:80" ];
    volumes = [
      "/srv/ntfy/cache:/var/cache/ntfy"
    ];
    environment = {
      NTFY_BASE_URL = "https://ntfy.ily.rs";
      NTFY_CACHE_FILE = "/var/cache/ntfy/cache.db";
      NTFY_BEHIND_PROXY = "true";
    };
  };

  systemd.tmpfiles.rules = [
    "d /srv/ntfy/cache 0750 podman podman -"
  ];

  # Workaround for NixOS/nixpkgs#410857 until backport of #475089 lands
  systemd.services.podman-ntfy.serviceConfig.Delegate = true;
}