ntfy crowdsec notification example

ntfy.yaml

# /etc/crowdsec/notifications/ntfy.yaml

type: http          # Don't change
name: ntfy          # Must match the registered plugin in the profile

# One of "trace", "debug", "info", "warn", "error", "off"
log_level: trace

# group_wait:         # Time to wait collecting alerts before relaying a message to this plugin, eg "30s"
# group_threshold:    # Amount of alerts that triggers a message before <group_wait> has expired, eg "10"
# max_retry:          # Number of attempts to relay messages to plugins in case of error
# timeout:            # Time to wait for response from the plugin before considering the attempt a failure, eg "10s"

#-------------------------
# plugin-specific options

# The following template receives a list of models.Alert objects
# The output goes in the http request body
format: |
    {{range . -}}{{$alert := . -}}{{range .Decisions -}}{{.Value}} will get {{.Type}} for next {{.Duration}} for triggering {{.Scenario}}
    https://www.shodan.io/host/{{.Value}}
    https://app.crowdsec.net/cti/{{.Value}}{{end -}}{{end -}}
url: https://ntfy.sh/crowdsec

method: POST
headers:
  Content-Type: "text/plain"
  Title: "Crowdsec Trigger"
  Tags: "warning"