fix: port 80 serves only the ACME challenge and a 301, ntfy-client.service stays off (19.0-2) #2

Merged

navigator merged 1 commit from fix/port-80-and-client-unit into master 2026-10-22 20:57:31 -03:00

Conversation 0 Commits 1 Files changed 9 +131 -5

navigator commented 2026-10-22 20:52:16 -03:00

Owner

Copy link

Port 80 served the whole ntfy API in plain text. It now serves only the ACME HTTP-01 path and a 301 to HTTPS; ntfy is on 443 only. A preset disables ntfy-client.service, which failed at boot.

Tests: layer.bats, image-check.bats, stack.bats (301 on /v1/health and on a publish, ACME path not redirected).

Port 80 served the whole ntfy API in plain text. It now serves only the ACME HTTP-01 path and a 301 to HTTPS; ntfy is on 443 only. A preset disables ntfy-client.service, which failed at boot. Tests: layer.bats, image-check.bats, stack.bats (301 on /v1/health and on a publish, ACME path not redirected).

navigator added 1 commit 2026-10-22 20:52:16 -03:00

fix: port 80 serves only the ACME challenge and a 301 to HTTPS, and ntfy-client.service stays off (19.0-2) ... 4565d24cdc

Port 80 of the default site served the whole ntfy API in plain text, a
publish included, because the route of ntfy is included in a server that
listens on 80 and 443. Now a map tells plain HTTP from HTTPS: the ACME
HTTP-01 path is served from the root of the site, as Keel Web does, and
every other request on port 80 gets a 301 to HTTPS.

The Debian package ships ntfy-client.service, which fails at boot with
"must specify topic". Systemd enables a unit at the first boot when no
preset names it, so a preset now disables it, and the image check tests
the preset.

navigator force-pushed fix/port-80-and-client-unit from 4565d24cdc to 4ae7d24938 2026-10-22 20:55:43 -03:00 Compare

navigator merged commit c7f4f32d6a into master 2026-10-22 20:57:31 -03:00

navigator deleted branch fix/port-80-and-client-unit 2026-10-22 20:57:31 -03:00

navigator referenced this pull request from a commit 2026-10-22 20:57:32 -03:00

Merge pull request 'fix: port 80 serves only the ACME challenge and a 301, ntfy-client.service stays off (19.0-2)' (#2) from fix/port-80-and-client-unit into master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Keel-Linux/keel-ntfy!2

No description provided.