Immich

Immich is an open-source self-hosted photo and video management solution.

Configure Immich

Run this on the Raspberry Pi
pi make immich config
(stdout)
IMMICH_TRAEFIK_HOST: Enter the Immich domain name (e.g., immich.example.com)

: immich.pi.example.com

? Do you want to enable sentry authorization in front of this app (effectively making the entire site private)?
> No
  Yes, with HTTP Basic Authentication
  Yes, with Oauth2
  Yes, with Mutual TLS (mTLS)

? Select the hardware acceleration to use for machine learning
> CPU
  ...

? Select the hardware acceleration to use for transcoding
> CPU
  ...

? Select whether you want Immich to upload images to a bind mount on the host or to a named Docker volume
  bind mount
> Docker volume
Run this on the Raspberry Pi
pi make immich install wait

Wait for the services to start and report themselves as healthy:

(stdout)
Waiting until all services are started and become healthy ...
All services healthy.

Add a new route on the sentry (droplet)

Run this on the Raspberry Pi
sentry make traefik config
(stdout)
? Traefik:
> Config
  Install (make install)
  Admin
  Exit (ESC)

? Traefik Configuration:
^ Entrypoints (including dashboard)
  TLS certificates and authorities
  Middleware (including sentry auth)
> Advanced Routing (Layer 7 / Layer 4 / WireGuard)
  Error page template
  Logging level
  Access logs

? Traefik routes
> Configure layer 7 TLS proxy
  Configure layer 4 TCP/UDP proxy
  Configure wireguard VPN

? Layer 7 TLS Proxy:
  List layer 7 ingress routes
> Add new layer 7 ingress route
  Remove layer 7 ingress routes
  Disable layer 7 TLS Proxy

Enter the public domain (SNI) for the route:

: immich.pi.example.com

Enter the destination IP address to forward to:

: 10.13.16.2

Enter the destination TCP port to forward to:

: 443

> Do you want to enable Proxy Protocol for this route? Yes

## Layer 7 TLS Proxy is ENABLED.
## Configured Layer 7 Routes:
Entrypoint              Destination_address  Destination_port  Proxy_protocol
----------              -------------------  ----------------  --------------
immich.pi.example.com  10.13.16.2           443               2
whoami.pi.example.com  10.13.16.2           443               2

Press ESC three times to go back to the main menu, and re-install Traefik:

(stdout)
? Traefik:
  Config
> Install (make install)
  Admin
  Exit (ESC)

After installation, press ESC to quit the config tool.

Finish

The app is now deployed at the URL you configured: https://immich.pi.example.com

Immediately secure the admin account

You should immediately open the URL in your web browser: https://immich.pi.example.com and complete the initial configuration to secure the admin user account.