diff --git a/clusters/cl01tl/platform/ntfy/values.yaml b/clusters/cl01tl/platform/ntfy/values.yaml
index fa685fb62..4c1ba12ef 100644
--- a/clusters/cl01tl/platform/ntfy/values.yaml
+++ b/clusters/cl01tl/platform/ntfy/values.yaml
@@ -11,7 +11,7 @@ ntfy:
             repository: binwiederhier/ntfy
             tag: v2.11.0
             pullPolicy: IfNotPresent
-          args: ["serve", "--cache-file", "/var/cache/ntfy/cache.db"]
+          args: ["serve"]
           env:
             - name: TZ
               value: US/Central
@@ -20,7 +20,7 @@ ntfy:
             - name: NTFY_LISTEN_HTTP
               value: :80
             - name: NTFY_CACHE_FILE
-              value: /var/lib/ntfy/cache.db
+              value: /var/cache/ntfy/cache.db
             - name: NTFY_CACHE_DURATION
               value: 36h
             - name: NTFY_CACHE_STARTUP_QUERIES
@@ -33,7 +33,7 @@ ntfy:
             - name: NTFY_BEHIND_PROXY
               value: true
             - name: NTFY_ATTACHMENT_CACHE_DIR
-              value: /var/lib/ntfy/attachments
+              value: /var/cache/ntfy/attachments
             - name: NTFY_ATTACHMENT_TOTAL_SIZE_LIMIT
               value: 4G
             - name: NTFY_ATTACHMENT_FILE_SIZE_LIMIT
@@ -48,6 +48,10 @@ ntfy:
               value: false
             - name: NTFY_UPSTREAM_BASE_URL
               value: https://ntfy.sh
+            - name: NTFY_AUTH_FILE
+              value: /var/cache/ntfy/user.db
+            - name: NTFY_AUTH_DEFAULT_ACCESS
+              value: deny-all
             # - name: NTFY_UPSTREAM_ACCESS_TOKEN
             #   value: ""
             # - name: NTFY_WEB_PUSH_PUBLIC_KEY