This repo helps you setting up mTLS certificates to use with Gotify.
The complete step-by-setp guide is posted here:
https://cyb3rko.medium.com/how-to-use-gotify-with-mtls-3792ce6f8b3c
The demo setup uses Caddy as the mTLS proxy, but you can use any other proxy capable of expecting and validating TLS client certificates.
If you want to use Cloudflare Tunnels with mTLS, find help in this comment:
gotify/android#344 (comment)
Generator script based on kafka-generate-ssl.sh by Confluent Inc.