It’s not possible to apply matchers to snippets. Snippets are simply fancy copy-paste.
Your snippet would have to have the matchers within, or you can import it into a handle which has a matcher.
Either way, what you’re trying to do seems like a mistake. POST and PUT should be authenticated, since they’re write operations. Authelia will remember auth by using a cookie.
No, that’s fine. ntfy is a notifier and I want to leave it open. I just do not want to expose the web interface (for no particular reason), thus the limitation on the GET
I want to let PUT and POST requests access the endpoint freely.
I also want the web interface (that I GET from the endoint) to be limited (my Authelia configuration protects everything that comes from outside my home network). This is just to avoid unnecessary traffic on the web interface.
The web interface will also issue POST and PUT requests, which are available without restrictions.