[GH-ISSUE #1131] Add a Input / Output diagram to show Privacy and security behavior #797

New issue

Open

opened 2026-05-05 04:17:59 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 04:17:59 -06:00

Owner

Originally created by @Mannshoch on GitHub (Jun 9, 2024).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1131

💡 Idea

Enhance the documentation with privacy and security relevant information and Warnings.
Add setup Wizard for the ntfy server that helps to properly setup ntfy and do not forget important details.

📓 Behind the Idea
I'm privacy driven. May a bit more than others. But Im a selflearner on Linux, Networking and currently on OpenWRT. I'm scepti on Google and microsoft. Cause of that, I play with the thought about using ntfy replacing Google push and using unified push.
therfore I have to grant ntfy Internet access.
While Playing around I miss the feeling that I configured everything properly.

Is only unly unified push accessible from internet? No login, no push message. Could I limit the network access to only accept more features from 192.168.. Or do I need a firewall for that?
There is the information, I could create an admin user. For me it is not clear why there is no default admin set up. It's irritating and I assume it could be more secure without it?
On the Android app I could setup the server, but It seems I do not get any information if the connection works or get an error information if not.

💻 Target components
docs.ntfy.sh
ntfy server

Originally created by @Mannshoch on GitHub (Jun 9, 2024). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1131 :bulb: **Idea** - Enhance the documentation with privacy and security relevant information and Warnings. - Add setup Wizard for the ntfy server that helps to properly setup ntfy and do not forget important details. :notebook: **Behind the Idea** I'm privacy driven. May a bit more than others. But Im a selflearner on Linux, Networking and currently on OpenWRT. I'm scepti on Google and microsoft. Cause of that, I play with the thought about using ntfy replacing Google push and using unified push. therfore I have to grant ntfy Internet access. While Playing around I miss the feeling that I configured everything properly. - Is _**only**_ unly unified push accessible from internet? No login, no push message. Could I limit the network access to only accept more features from 192.168.*.* Or do I need a firewall for that? - There is the information, I could create an admin user. For me it is not clear why there is no default admin set up. It's irritating and I assume it could be more secure without it? - On the Android app I could setup the server, but It seems I do not get any information if the connection works or get an error information if not. :computer: **Target components** docs.ntfy.sh ntfy server

gitea-mirror added the

enhancement

label 2026-05-05 04:17:59 -06:00

gitea-mirror commented

2026-05-05 04:18:01 -06:00

Author

Owner

@wunter8 commented on GitHub (Jun 9, 2024):

UnifiedPush messages are just ntfy messages sent to a special topic in a special format. You cannot limit ntfy features by IP address (since there's little difference between a non-UnifiedPush message and a UnifiedPush message)
I'm not sure what you mean. There's no default admin because we don't know what you want the admin username/password to be. You don't even necessarily need an admin account at all (for example, if you set up the server default access as "read-write")
if the Android app has problems connecting to the server, you will see it says "reconnecting." You can also send a test notification from the 3-dot menu on a specific subscription page

@wunter8 commented on GitHub (Jun 9, 2024): 1) UnifiedPush messages are just ntfy messages sent to a special topic in a special format. You cannot limit ntfy features by IP address (since there's little difference between a non-UnifiedPush message and a UnifiedPush message) 2) I'm not sure what you mean. There's no default admin because we don't know what you want the admin username/password to be. You don't even necessarily need an admin account at all (for example, if you set up the server default access as "read-write") 3) if the Android app has problems connecting to the server, you will see it says "reconnecting." You can also send a test notification from the 3-dot menu on a specific subscription page