# Push Notifications

Underseerr uses a secure relay for push notifications to ensure your PII (like email) is never stored in plain text and to provide a bridge to Firebase Cloud Messaging (FCM).

## 🚀 Two Ways to Connect

### 1. Hosted Relay (Underseerr Pro)

By default, the app can use our managed relay at `pro.underseerr.dev`. This includes features like subscription gating and simplified setup.

### 2. Self-Hosted Relay (Community)

For maximum privacy, we encourage you to host your own relay using the code in the `:notification-relay` directory.

## 🛠 Self-Hosting Setup

### Prerequisites

1. A **Cloudflare Account**.
2. A **Firebase Service Account JSON** (from Project Settings -> Service Accounts).

### Deployment

1. Navigate to `/notification-relay`.
2. Configure your `GOOGLE_APPLICATION_CREDENTIALS_JSON` secret via Wrangler.
3. Run `npx wrangler deploy`.

## 🔒 Security (Webhook Secret)

To prevent unauthorized notifications, you should configure a **Webhook Secret**:

1. In Underseerr app: **Settings -> Notification Server -> Generate Secret**.
2. In Overseerr Web UI: **Settings -> Notifications -> Webhook -> JSON Custom Headers**.
3. Add Header: `X-Underseerr-Secret` with your generated value.

For detailed steps, see the **[Relay Documentation](../notification-relay/README.md)**.