SafeCall ntfy keys (secret-free)

On each SafeCall install that should publish authenticated and mint real Keryx tokens. The CLI restarts the service on config set. Packet: ntfy-deployer.md. How-to: ntfy-auth-and-play-internal.md Part D.

Do not paste real tk_… or passwords into git or chat.

bash

# Confirm the notify origin (trailing slash is normalized).
# Expect https://NOTIFY_HOST
sudo ./util.sh config show | grep server_ntfy_server_url

sudo ./util.sh config set server_ntfy_publish_token 'tk_REPLACE_ME'
sudo ./util.sh config set server_ntfy_token_manager_user 'safecall-token-manager'
sudo ./util.sh config set server_ntfy_token_manager_password 'REPLACE_ME'

Prove a new Keryx QR is safecall.keryx.ntfy.v2 with subscribe_auth: Bearer tk_… and not tk_local_…. Do not photograph that QR into chat.

If mint returns 404, upgrade ntfy to 2.16+ before inventing a workaround.

SafeCall ntfy keys (secret-free) ​

SafeCall ntfy keys (secret-free)