{ config, lib, ... }: {

    options.sysconfig.opts.virtualization.ntfy.enable = lib.mkOption {
        type = lib.types.bool;
        default = false;
    };

    config = lib.mkIf config.sysconfig.opts.virtualization.ntfy.enable {

        containers.ntfy = {

            autoStart = true;
            privateNetwork = true;
            hostAddress = "192.168.100.10";
            localAddress = "192.168.100.19";

            config = {

                services.ntfy-sh = {
                    
                    enable = true;
                    
                    settings = {
                        
                        base-url = "https://ntfy.blunkall.us";

                        listen-http = ":80";

                        behind-proxy = true;

                        upstream-base-url = "https://ntfy.sh";

                        auth-default-access = "deny-all";
                    };
                };

                networking.firewall.allowedTCPPorts = [ 80 ];

                system.stateVersion = "24.05";
            };
        };
    };
}