diff --git a/ntfy/etc/ntfy/server,yml b/ntfy/etc/ntfy/server,yml
new file mode 100644
index 0000000..700e4b3
--- /dev/null
+++ b/ntfy/etc/ntfy/server,yml
@@ -0,0 +1,4 @@
+auth-default-access: "deny-all"
+auth:
+  web: true
+
diff --git a/ntfy/stack.yml b/ntfy/stack.yml
index 8c610f1..8a0311b 100644
--- a/ntfy/stack.yml
+++ b/ntfy/stack.yml
@@ -1,6 +1,7 @@
 # mkdir -pv /data/volumes/ntfy/lib
 # pull:: docker compose -p ntfy --env-file ./ntfy/env.cfg -f ./ntfy/stack.yml pull
 # run:: docker compose -p ntfy --env-file ./ntfy/env.cfg -f ./ntfy/stack.yml up -d
+# 部署好后: docker exec -it ntfy ntfy user add --role=admin <username> 设置登录账号和密码
 
 services:
   ntfy:
@@ -26,6 +27,7 @@ services:
       - NTFY_WEB_PUSH_PRIVATE_KEY= <private_key>
       - NTFY_WEB_PUSH_FILE=/var/lib/ntfy/webpush.db #设置web推送数据文件
       - NTFY_WEB_PUSH_EMAIL_ADDRESS= <email>
+      - NTFY_ENABLE_SIGNUP=false
     volumes:
       - /etc/localtime:/etc/localtime:ro
       - /etc/timezone:/etc/timezone:ro
diff --git a/webout/configs/caddy/txc-proxy.conf b/webout/configs/caddy/txc-proxy.conf
index b11be0c..5c8fdf7 100644
--- a/webout/configs/caddy/txc-proxy.conf
+++ b/webout/configs/caddy/txc-proxy.conf
@@ -13,4 +13,16 @@ https://www.48474.site {
 https://dom.48474.site {
     tls moqiruyi@gmail.com
     reverse_proxy 10.1.8.14:9800
-}
\ No newline at end of file
+}
+
+http://ntfy.48474.site {
+    tls moqiruyi@gmail.com
+    redir / /login temporary
+    # @httpget {
+    #     protocol http
+    #     method GET
+    #     path_regexp ^/([-_a-z0-9]{0,64}$|docs/|static/)
+    # }
+    # redir @httpget https://{host}{uri}
+    reverse_proxy 10.1.8.14:9800
+}