diff --git a/bundles/ntfy/files/server.yml b/bundles/ntfy/files/server.yml
index 305e4b2..467cf82 100644
--- a/bundles/ntfy/files/server.yml
+++ b/bundles/ntfy/files/server.yml
@@ -85,7 +85,7 @@ cache-startup-queries: |
 #   ntfy user and group by running: chown ntfy.ntfy <filename>.
 #
 auth-file: "/var/lib/ntfy/user.db"
-auth-default-access: "deny-all"
+auth-default-access: "write-only"
 
 # If set, the X-Forwarded-For header is used to determine the visitor IP address
 # instead of the remote address of the connection.
diff --git a/bundles/ntfy/metadata.py b/bundles/ntfy/metadata.py
index f54336f..c71a67a 100644
--- a/bundles/ntfy/metadata.py
+++ b/bundles/ntfy/metadata.py
@@ -14,9 +14,9 @@ defaults = {
     },
     'backups': {
         'paths': {
-            "/var/cache/ntfy"
-            "/var/lib/ntfy"
-            "/var/opt/ntfy"
+            "/var/cache/ntfy",
+            "/var/lib/ntfy",
+            "/var/opt/ntfy",
         },
     },
     'zfs': {
@@ -63,6 +63,8 @@ def nginx(metadata):
             'additional_config': { 
                 'proxy_connect_timeout 3m',
                 'proxy_send_timeout 3m',
+                'proxy_request_buffering off',
+                'proxy_redirect off',
             }
         },
     }