Set up notifiarr

nas-compose.env

@@ -26,3 +26,5 @@ NASCOMPOSE_AUTHELIA_SMTP_SENDER=
 NASCOMPOSE_DUCKDNS_DOMAIN=
 
 NASCOMPOSE_TRANSMISSION_VPNREGION=
+
+NASCOMPOSE_NOTIFIARR_MODE=

services/authentication/configs/access.yml

@@ -34,8 +34,9 @@ access_control:
       policy: one_factor
       subject:
         - 'group:transmission-basic'
-    # Disable authentication on API protected by API keys
-    - domain_regex: '^(bazarr|prowlarr|radarr|sonarr)\.'
+    # Disable authentication on API protected by API keys.
+    # Note those are behind authelia, therefore external access to the API; internal access doesn't require a bypass
+    - domain_regex: '^(prowlarr|radarr|sonarr|notifiarr)\.'
       policy: bypass
       resources:
         - '^/api$'

services/notifiarr/docker-compose.yml

@@ -0,0 +1,30 @@
+name: Notifiarr
+
+services:
+  notifiarr:
+    hostname: notifiarr
+    image: golift/notifiarr
+    environment:
+      PUID: ${NASCOMPOSE_UID?}
+      PGID: ${NASCOMPOSE_GID?}
+      DN_UI_PASSWORD: webauth
+      DN_MODE: ${NASCOMPOSE_NOTIFIARR_MODE?}
+    networks:
+      - reverse-proxy
+    volumes:
+      - notifiarr_config:/config/
+    restart: unless-stopped
+    labels:
+      traefik.enable: true
+      traefik.http.routers.notifiarr.middlewares: authelia@file, notifiarr-authelia@file
+
+networks:
+  reverse-proxy:
+    external: true
+
+volumes:
+ notifiarr_config:
+    driver_opts:
+      type: none
+      o: bind
+      device: ${NASCOMPOSE_SERVICES?}/notifiarr/volumes/notifiarr_config/

services/reverse-proxy/configs/dynamic/htransformation.yml

@@ -0,0 +1,9 @@
+http:
+  middlewares:
+    notifiarr-authelia:
+      plugin:
+        htransformation:
+          Rules:
+            - Type: Rename
+              Header: Remote-User
+              Value: X-WebAuth-User

services/reverse-proxy/configs/traefik.yml

@@ -30,3 +30,9 @@ entryPoints:
 
 global:
   sendAnonymousUsage: false
+
+experimental:
+  plugins:
+    htransformation:
+      moduleName: github.com/tomMoulard/htransformation
+      version: v0.2.7

services/reverse-proxy/docker-compose.yml

@@ -19,6 +19,8 @@ services:
         target: /etc/traefik/dynamic/tls.yml
       - source: traefik_hsts
         target: /etc/traefik/dynamic/hsts.yml
+      - source: traefik_htransformation
+        target: /etc/traefik/dynamic/htransformation.yml
 
       - source: traefik_authelia
         target: /etc/traefik/dynamic/authelia.yml
@@ -49,6 +51,8 @@ configs:
     file: ${NASCOMPOSE_SERVICES?}/reverse-proxy/configs/dynamic/tls.yml
   traefik_hsts:
     file: ${NASCOMPOSE_SERVICES?}/reverse-proxy/configs/dynamic/hsts.yml
+  traefik_htransformation:
+    file: ${NASCOMPOSE_SERVICES?}/reverse-proxy/configs/dynamic/htransformation.yml
   traefik_authelia:
     file: ${NASCOMPOSE_SERVICES?}/reverse-proxy/configs/dynamic/authelia.yml
   traefik_transmission-api: