Add ntfy authentication support (username/password and API key)

- Settings table gets ntfy_username, ntfy_password, ntfy_api_key columns
- Backend applies Basic or Bearer auth header when sending notifications
- Settings page UI lets you toggle between no auth, basic, or token auth
- Masked credential display on load to avoid exposing stored secrets
- README updated with auth modes documentation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/models.py

@@ -86,6 +86,9 @@ class Settings(Base):
     notification_time = Column(String(5), default="07:00")
     timezone = Column(String(50), default="UTC")
     location_name = Column(String(100))
+    ntfy_username = Column(String(200))
+    ntfy_password = Column(String(200))
+    ntfy_api_key = Column(String(200))
 
 
 class NotificationLog(Base):

backend/routers/notifications.py

@@ -1,3 +1,4 @@
+import base64
 from datetime import date, timedelta
 from fastapi import APIRouter, Depends, HTTPException
 from sqlalchemy.orm import Session
@@ -96,16 +97,25 @@ async def send_ntfy(settings: Settings, title: str, message: str, db: Session, p
     server = (settings.ntfy_server or "https://ntfy.sh").rstrip("/")
     url = f"{server}/{settings.ntfy_topic}"
 
+    headers = {
+        "Title": title,
+        "Priority": priority,
+        "Tags": "seedling",
+    }
+    if settings.ntfy_api_key:
+        headers["Authorization"] = f"Bearer {settings.ntfy_api_key}"
+    elif settings.ntfy_username:
+        creds = base64.b64encode(
+            f"{settings.ntfy_username}:{settings.ntfy_password or ''}".encode()
+        ).decode()
+        headers["Authorization"] = f"Basic {creds}"
+
     try:
         async with httpx.AsyncClient(timeout=10) as client:
             resp = await client.post(
                 url,
                 content=message.encode("utf-8"),
-                headers={
-                    "Title": title,
-                    "Priority": priority,
-                    "Tags": "seedling",
-                },
+                headers=headers,
             )
             resp.raise_for_status()
 

backend/schemas.py

@@ -78,6 +78,9 @@ class SettingsUpdate(BaseModel):
     notification_time: Optional[str] = "07:00"
     timezone: Optional[str] = "UTC"
     location_name: Optional[str] = None
+    ntfy_username: Optional[str] = None
+    ntfy_password: Optional[str] = None
+    ntfy_api_key: Optional[str] = None
 
 
 class SettingsOut(SettingsUpdate):