diff --git a/ntfy/ntfy.yaml b/ntfy/ntfy.yaml
index 9c484fe..0503e03 100644
--- a/ntfy/ntfy.yaml
+++ b/ntfy/ntfy.yaml
@@ -19,6 +19,8 @@ data:
     base-url: https://ntfy.pyrocufflink.net
     behind-proxy: true
     listen-http: '[::]:2586'
+    attachment-cache-dir: /var/cache/ntfy/attachments
+    attachment-file-size-limit: 100M
 
 ---
 apiVersion: v1
@@ -89,10 +91,24 @@ spec:
         - name: config
           mountPath: /etc/ntfy
           readOnly: true
+        - name: cache
+          mountPath: /var/cache/ntfy/attachments
+          subPath: attachments
+      securityContext:
+        fsGroup: 1000
       volumes:
       - name: config
         configMap:
           name: ntfy
+      - name: cache
+        ephemeral:
+          volumeClaimTemplate:
+            spec:
+              accessModes:
+              - ReadWriteOnce
+              resources:
+                requests:
+                  storage: 1Gi
 
 ---
 apiVersion: networking.k8s.io/v1
@@ -105,6 +121,8 @@ metadata:
     app.kubernetes.io/component: ntfy
     app.kubernetes.io/instance: ntfy
     app.kubernetes.io/part-of: ntfy
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-body-size: '0'
 spec:
   ingressClassName: nginx
   rules: