diff --git a/services/ntfy.nix b/services/ntfy.nix
index 74a3b06..f053974 100644
--- a/services/ntfy.nix
+++ b/services/ntfy.nix
@@ -1 +1,19 @@
-{ config, pkgs, ... }: { }
+{ config, pkgs, ... }:
+{
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+  networking.firewall.allowedUDPPorts = [ 443 ];
+
+  services.ntfy = {
+    enable = true;
+    settings = {
+      base-url = "https://ntfy.vsinerva.fi";
+      listen-https = ":443";
+      key-file = "/var/lib/ntfy/privkey.pem";
+      cert-file = "/var/lib/ntfy/fullchain.pem";
+      cache-file = "/var/lib/ntfy/notif-cache.sqlite";
+    };
+  };
+}