diff --git a/containers/ntfy/Dockerfile b/containers/ntfy/Dockerfile
index 238e8c1..e53a39d 100644
--- a/containers/ntfy/Dockerfile
+++ b/containers/ntfy/Dockerfile
@@ -1,9 +1,9 @@
 # ntfy push notification server
 # Three-stage build: Web UI (Node), server (Go+SQLite), runtime (Alpine)
 
-ARG CONTAINER_APP_VERSION=v2.17.0
+ARG CONTAINER_APP_VERSION=v2.19.2
 ARG NTFY_VERSION=${CONTAINER_APP_VERSION}
-ARG NTFY_COMMIT=a03a37feb1869e84e3af0dd6190bdc7183f211ec
+ARG NTFY_COMMIT=2ad78edca12f1a43c566ffab9e93b3ed26426a6c
 
 FROM node:22-alpine AS web-build
 
diff --git a/containers/ntfy/default.nix b/containers/ntfy/default.nix
index 5164bba..7c13afd 100644
--- a/containers/ntfy/default.nix
+++ b/containers/ntfy/default.nix
@@ -1,21 +1,21 @@
 # Nix-built ntfy push notification server
-# Builds v2.17.0 from forge mirror (nixpkgs has 2.15.0)
+# Builds v2.19.2 from forge mirror
 # Built with dockerTools.buildLayeredImage for efficient layer caching
 { pkgs ? import <nixpkgs> { } }:
 
 let
-  version = "2.17.0";
+  version = "2.19.2";
 
   src = pkgs.fetchgit {
     url = "https://forge.ops.eblu.me/mirrors/ntfy.git";
     rev = "v${version}";
-    hash = "sha256-/dxILAkye1HwYcybnx1WrMRK2jXZMrxal2ZKm6y2bWc=";
+    hash = "sha256-HISQnb6LkKGujZsWCzVD3dTuobhUXqrmTFuov7dU+lY=";
   };
 
   ui = pkgs.buildNpmPackage {
     inherit src version;
     pname = "ntfy-sh-ui";
-    npmDepsHash = "sha256-d73rymqCKalsjAwHSJshEovmUHJStfGt8wcZYN49sHY=";
+    npmDepsHash = "sha256-PmhWzktybM6Cg7yYRfbxWE83C+XkmHh4garHhsydwwE=";
 
     prePatch = ''
       cd web/
@@ -34,10 +34,12 @@ let
   ntfy = pkgs.buildGoModule {
     inherit src version;
     pname = "ntfy-sh";
-    vendorHash = "sha256-/mQ+UwBYz78mPVVwYgsSYatE00ce2AKXJdx+nl6oT8E=";
+    vendorHash = "sha256-mr2PbxT5QWf4HZGgUg+oUjauqmZ6bh6N3f0ytwPDppU=";
 
     doCheck = false;
 
+    subPackages = [ "." ];
+
     ldflags = [
       "-s"
       "-w"
diff --git a/docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md b/docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md
new file mode 100644
index 0000000..4eccbfe
--- /dev/null
+++ b/docs/changelog.d/upgrade-ntfy-v2.19.2.infra.md
@@ -0,0 +1 @@
+Upgrade ntfy v2.17.0 → v2.19.2 (adds experimental PostgreSQL support, read replicas, web push fixes)
diff --git a/service-versions.yaml b/service-versions.yaml
index 23a31f9..28013bc 100644
--- a/service-versions.yaml
+++ b/service-versions.yaml
@@ -33,8 +33,8 @@ services:
 
   - name: ntfy
     type: argocd
-    last-reviewed: 2026-02-17
-    current-version: "v2.17.0"
+    last-reviewed: 2026-03-23
+    current-version: "v2.19.2"
     upstream-source: https://github.com/binwiederhier/ntfy/releases
 
   - name: homepage