Protonmail relies solely on Firebase for receiving notifications on Android. While UniversalPush support is probably in the works, it may take some time until users on ROMs without GSF get built-in notifications.
The service requires a Linux box to run on, and can be deployed as a container or by running the provided binary. Building from source is of course also an option.
The service is a stripped down version of Hydroxide, the FOSS Protonmail Bridge alternative. There are no ports exposed, all communication is outwards. Communications to Proton servers use the Proton API. The service only receives events from Proton servers, and if the event is incoming mail, a notification is sent to a ntfy.sh server and topic of your choice. Other types of events are simply disregarded, and no other processing is done. The sent push event does not contain any detailed information.
EDIT: Starting from version v0.28.8-push7 the daemon supports HTTP basic auth for the push endpoint.
Disclaimer: I'm the author. All of the work is thanks to https://github.com/emersion/hydroxide, I've merely mutilized the great upstream project of most features for a single purpose. Issues, comments and pull requests are welcome!
I haven't heard of Hydroxide before; thank you for highlighting it! Just one question: Does it also require a premium account like the official bridge, or is it also available for free accounts?
I think it does require a paid account, Hydroxide basically acts like the official Proton bridge.
I haven't actually tested with a free account, so there's a chance it does work. When you run the auth command (which is the same as upstream Hydroxide), it will probably throw an error.
If you have a free account and try this out (or Hydroxide), please report how it goes back here, I'll add a note to the readme. Upstream doesn't seem to mention this in their repo either.
Currently, I only have a free account there. I tried Hydroxide first, and I had no problem logging in. I was also able to fetch some emails. I will try hydroxide-push as well later.
It only works through the Proton Mail Bridge application, which is only available for desktop. That's because Proton's end-to-end encryption makes it impossible to access your emails while they are on Proton's servers via IMAP. They would need to be decrypted on the server, but that would make the entire encryption pointless. The Proton Mail Bridge connects to the server, downloads the encrypted data, decrypts it locally on your PC and locally exposes an IMAP server, which contains your decrypted messages.