Как установить Gotify на Ubuntu 25.04

1
2

# - данные команды должны выполняться с правами root либо непосредственно от имени пользователя root, либо с помощью команды sudo.
$ - данные команды должны выполняться от имени обычного пользователя

1

$ sudo apt update -y && sudo apt upgrade -y

1

$ sudo apt install postgresql postgresql-contrib

1

$ sudo systemctl enable postgresql.service && sudo systemctl start postgresql.service

1
2
3

$ sudo -u postgres psql -c "CREATE USER gotify WITH PASSWORD 'yourpassword';"
$ sudo -u postgres psql -c "CREATE DATABASE gotify_db OWNER gotify;"
$ sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE gotify_db TO gotify;"

1

$ sudo useradd -s /usr/sbin/nologin -r -M gotify

1
2
3
4

$ wget https://github.com/gotify/server/releases/download/v2.6.3/gotify-linux-amd64.zip
$ unzip gotify-linux-amd64.zip
$ sudo mv gotify-linux-amd64/gotify-linux-amd64 /usr/local/bin/gotify
$ sudo chmod +x /usr/local/bin/gotify

1

$ sudo mkdir -p /etc/gotify/

1

$ sudo nano config.yml

1

sudo mkdir -p /var/lib/gotify/images && sudo mkdir /var/lib/gotify/plugins && sudo chown -R gotify /var/lib/gotify

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

server:
  keepaliveperiodseconds: 0 # 0 = use Go default (15s); -1 = disable keepalive; set the interval in which keepalive packets will be sent. Only change this value if you know what you are doing.
  listenaddr: '' # the address to bind on, leave empty to bind on all addresses. Prefix with "unix:" to create a unix socket. Example: "unix:/tmp/gotify.sock".
  port: 9000 # the port the HTTP server will listen on

  ssl:
    enabled: false # if https should be enabled
    redirecttohttps: true # redirect to https if site is accessed by http
    listenaddr: '' # the address to bind on, leave empty to bind on all addresses. Prefix with "unix:" to create a unix socket. Example: "unix:/tmp/gotify.sock".
    port: 443 # the https port
    certfile: # the cert file (leave empty when using letsencrypt)
    certkey: # the cert key (leave empty when using letsencrypt)
    letsencrypt:
      enabled: false # if the certificate should be requested from letsencrypt
      accepttos: false # if you accept the tos from letsencrypt
      cache: data/certs # the directory of the cache from letsencrypt
      hosts: # the hosts for which letsencrypt should request certificates
  #     - mydomain.tld
  #     - myotherdomain.tld
  responseheaders: # response headers are added to every response (default: none)
  # X-Custom-Header: "custom value"
  trustedproxies: # IPs or IP ranges of trusted proxies. Used to obtain the remote ip via the X-Forwarded-For header. (configure 127.0.0.1 to trust sockets)
  #   - 127.0.0.1
  #   - 192.168.178.0/24
  #   - ::1

  cors: # Sets cors headers only when needed and provides support for multiple allowed origins. Overrides Access-Control-* Headers in response headers.
    alloworigins:
    # - ".+.example.com"
    # - "otherdomain.com"
    allowmethods:
    # - "GET"
    # - "POST"
    allowheaders:
  #   - "Authorization"
  #   - "content-type"

  stream:
    pingperiodseconds: 45 # the interval in which websocket pings will be sent. Only change this value if you know what you are doing.
    allowedorigins: # allowed origins for websocket connections (same origin is always allowed, default only same origin)
      - "push.example.com"
database: # see below
  dialect: postgres
  connection: host=localhost port=5432 user=gotify dbname=gotify_db password=yourpassword
defaultuser: # on database creation, gotify creates an admin user (these values will only be used for the first start, if you want to edit the user after the first start use the WebUI)
  name: admin # the username of the default user
  pass: admin # the password of the default user
passstrength: 10 # the bcrypt password strength (higher = better but also slower)
uploadedimagesdir: /var/lib/gotify/images # the directory for storing uploaded images
pluginsdir: /var/lib/gotify/plugins # the directory where plugin resides (leave empty to disable plugins)
registration: false # enable registrations

1
2
3

$ sudo chmod 600 /etc/gotify/config.yml
$ sudo chmod go-rw /etc/gotify/config.yml
$ sudo chown gotify:gotify /etc/gotify/config.yml

1

$ sudo nano /etc/systemd/system/gotify.service

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

[Unit]
Description=Gotify
Requires=network.target
After=network.target
After=postgresql.service

[Service]
Type=simple
User=gotify
Group=gotify
WorkingDirectory=/etc/gotify/
EnvironmentFile=/etc/gotify/config.yml
ExecStart=/usr/local/bin/gotify
Restart=on-failure
RestartSec=3

[Install]
WantedBy=multi-user.target

1
2

$ sudo systemctl start gotify.service
$ sudo systemctl enable gotify.service

1

$ sudo apt-get -y install nginx

1

$ sudo nano /etc/nginx/sites-available/gotify.conf

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

server {
    server_name     push.example.com;
    listen          80;

    location / {
        proxy_pass http://127.0.0.1:9000;
        proxy_redirect off;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

1

$ sudo ln -s /etc/nginx/sites-available/gotify.conf /etc/nginx/sites-enabled/gotify.conf

1
2

$ sudo nginx -t
$ sudo systemctl restart nginx.service

1

$ sudo apt install python3-certbot-nginx

1

$ sudo certbot certonly --nginx -d push.example.com

1

https://push.example.com

1

$ sudo certbot renew --dry-run