From d1dac0c2413c87198453b1f7a1e4d7a9d33f4ed6 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Mon, 23 Mar 2026 10:32:06 -0700
Subject: [PATCH] =?UTF-8?q?Upgrade=20ntfy=20v2.17.0=20=E2=86=92=20v2.19.2?=
 =?UTF-8?q?=20(#305)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Summary
- Upgrade ntfy from v2.17.0 to v2.19.2
- Update Dockerfile and Nix build definitions with new version, commit SHA, and hashes
- Add `subPackages = [ "." ]` to Nix build to handle new `tools/loadtest` module in upstream

## Upstream changes (no breaking changes)
- **v2.18.0:** Experimental PostgreSQL backend support
- **v2.19.0:** PostgreSQL read replica support, notification sound throttling
- **v2.19.1-2:** PostgreSQL bug fixes, web push race condition fix

## Test plan
- [ ] Container builds complete on Forgejo Actions (both Dockerfile and Nix)
- [ ] Update kustomization.yaml `newTag` to the built nix image tag
- [ ] `argocd app set ntfy --revision upgrade/ntfy-v2.19.2 && argocd app sync ntfy`
- [ ] Verify ntfy health: `curl https://ntfy.ops.eblu.me/v1/health`
- [ ] Send a test notification

Reviewed-on: https://forge.eblu.me/eblume/blumeops/pulls/305
---
 argocd/manifests/ntfy/kustomization.yaml       |  2 +-
 containers/ntfy/Dockerfile                     |  4 ++--
 containers/ntfy/default.nix                    | 12 +++++++-----
 docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md |  1 +
 service-versions.yaml                          |  4 ++--
 5 files changed, 13 insertions(+), 10 deletions(-)
 create mode 100644 docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md

diff --git a/argocd/manifests/ntfy/kustomization.yaml b/argocd/manifests/ntfy/kustomization.yaml
index aa4355f..a2bca10 100644
--- a/argocd/manifests/ntfy/kustomization.yaml
+++ b/argocd/manifests/ntfy/kustomization.yaml
@@ -8,7 +8,7 @@ resources:
   - ingress-tailscale.yaml
 images:
   - name: registry.ops.eblu.me/blumeops/ntfy
-    newTag: v2.17.0-613f05d-nix
+    newTag: v2.19.2-f654c57-nix
 configMapGenerator:
   - name: ntfy-config
     files:
diff --git a/containers/ntfy/Dockerfile b/containers/ntfy/Dockerfile
index 238e8c1..e53a39d 100644
--- a/containers/ntfy/Dockerfile
+++ b/containers/ntfy/Dockerfile
@@ -1,9 +1,9 @@
 # ntfy push notification server
 # Three-stage build: Web UI (Node), server (Go+SQLite), runtime (Alpine)
 
-ARG CONTAINER_APP_VERSION=v2.17.0
+ARG CONTAINER_APP_VERSION=v2.19.2
 ARG NTFY_VERSION=${CONTAINER_APP_VERSION}
-ARG NTFY_COMMIT=a03a37feb1869e84e3af0dd6190bdc7183f211ec
+ARG NTFY_COMMIT=2ad78edca12f1a43c566ffab9e93b3ed26426a6c
 
 FROM node:22-alpine AS web-build
 
diff --git a/containers/ntfy/default.nix b/containers/ntfy/default.nix
index 5164bba..7c13afd 100644
--- a/containers/ntfy/default.nix
+++ b/containers/ntfy/default.nix
@@ -1,21 +1,21 @@
 # Nix-built ntfy push notification server
-# Builds v2.17.0 from forge mirror (nixpkgs has 2.15.0)
+# Builds v2.19.2 from forge mirror
 # Built with dockerTools.buildLayeredImage for efficient layer caching
 { pkgs ? import <nixpkgs> { } }:
 
 let
-  version = "2.17.0";
+  version = "2.19.2";
 
   src = pkgs.fetchgit {
     url = "https://forge.ops.eblu.me/mirrors/ntfy.git";
     rev = "v${version}";
-    hash = "sha256-/dxILAkye1HwYcybnx1WrMRK2jXZMrxal2ZKm6y2bWc=";
+    hash = "sha256-HISQnb6LkKGujZsWCzVD3dTuobhUXqrmTFuov7dU+lY=";
   };
 
   ui = pkgs.buildNpmPackage {
     inherit src version;
     pname = "ntfy-sh-ui";
-    npmDepsHash = "sha256-d73rymqCKalsjAwHSJshEovmUHJStfGt8wcZYN49sHY=";
+    npmDepsHash = "sha256-PmhWzktybM6Cg7yYRfbxWE83C+XkmHh4garHhsydwwE=";
 
     prePatch = ''
       cd web/
@@ -34,10 +34,12 @@ let
   ntfy = pkgs.buildGoModule {
     inherit src version;
     pname = "ntfy-sh";
-    vendorHash = "sha256-/mQ+UwBYz78mPVVwYgsSYatE00ce2AKXJdx+nl6oT8E=";
+    vendorHash = "sha256-mr2PbxT5QWf4HZGgUg+oUjauqmZ6bh6N3f0ytwPDppU=";
 
     doCheck = false;
 
+    subPackages = [ "." ];
+
     ldflags = [
       "-s"
       "-w"
diff --git a/docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md b/docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md
new file mode 100644
index 0000000..4eccbfe
--- /dev/null
+++ b/docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md
@@ -0,0 +1 @@
+Upgrade ntfy v2.17.0 → v2.19.2 (adds experimental PostgreSQL support, read replicas, web push fixes)
diff --git a/service-versions.yaml b/service-versions.yaml
index 23a31f9..28013bc 100644
--- a/service-versions.yaml
+++ b/service-versions.yaml
@@ -33,8 +33,8 @@ services:
 
   - name: ntfy
     type: argocd
-    last-reviewed: 2026-02-17
-    current-version: "v2.17.0"
+    last-reviewed: 2026-03-23
+    current-version: "v2.19.2"
     upstream-source: https://github.com/binwiederhier/ntfy/releases
 
   - name: homepage