Add ntfy push notifications + mailrise SMTP bridge

- ntfy: self-hosted push notification service (port 8086)
- mailrise: SMTP-to-ntfy converter (port 8025)
- Configs in ./ntfy/server.yml and ./ntfy/mailrise.yml
- Token-based authentication for ntfy
- Updated docs and .gitignore

README.md

@@ -14,7 +14,7 @@ The deployment is split into **5 independent compose stacks** sharing a common `
 | **Media** | `docker-compose.media.yml` | prowlarr, flaresolverr, qbittorrent, radarr, sonarr, lidarr, bazarr, seerr, jellyfin, slskd, metube, maloja, multi-scrobbler |
 | **Documents** | `docker-compose.documents.yml` | onlyoffice, paperless-ngx (db, broker, tika, gotenberg, webserver, ai), stirling-pdf, open-webui |
 | **Photo & ROM Library** | `docker-compose.photo-roms.yml` | immich (server, postgres, ml, redis), syncthing, retrom (db, adminer, service, jaeger) |
-| **Utilities** | `docker-compose.utils.yml` | gitea (server + db), tandoor (db + web), speedtest-tracker (app + db), rustdesk (hbbs + hbbr), redbot, iperf3-server, neolink, linkwarden (app + db + meilisearch) |
+| **Utilities** | `docker-compose.utils.yml` | gitea (server + db), tandoor (db + web), speedtest-tracker (app + db), rustdesk (hbbs + hbbr), redbot, iperf3-server, neolink, linkwarden (app + db + meilisearch), ntfy, mailrise |
 
 ## Architecture
 
@@ -58,6 +58,8 @@ The deployment is split into **5 independent compose stacks** sharing a common `
 | Utilities | iperf3-server | Network performance test | 5201 |
 | Utilities | Neolink | Reolink camera bridge | 8554 |
 | Utilities | Linkwarden | Bookmark manager | 3400 |
+| Utilities | Ntfy | Push notification service | 8086 |
+| Utilities | Mailrise | SMTP-to-ntfy notification bridge | 8025 |
 
 ### Network Segmentation
 
@@ -100,6 +102,7 @@ Networks are created by `infra.yml` and referenced as external by all other stac
 ├── surmai/
 ├── syncthing/
 ├── tandoor/
+├── ntfy/ (notification configs)
 ├── wud/
 └── .env (shared environment variables)
 ```