immich-public-proxy

There is an immich proxy project: https://github.com/alangrainger/immich-public-proxy I wouldn't make the instance itself public, but I think this is a decent tradeoff. Of course still requires one to be a sysadmin.

Likely https://github.com/alangrainger/immich-public-proxy

Yeah, sharing is one of the big problems with Immich. You either need to expose your whole instance to make share links publicly accessible (and there's no way to secure user accounts with 2FA), or create user accounts for the people you want to share with and/or invite them and set up your VPN for them to access the shares. There's https://github.com/alangrainger/immich-public-proxy, which is a weird workaround (it's a separate gallery frontend that syncs with your instance to only expose this specific service, so you can keep your Immich instane private).

There is a project, which proxies album requests to a private immich instance, if one doesn't want to expose it: https://github.com/alangrainger/immich-public-proxy

It is amazing how usable Immich is with so little hardware. I run it off a Proxmox VM with a caddy container as a reverse proxy and it just works so well. The hardest part is figuring out how to safely expose it so you can share albums with others, but Immich Public Proxy[0] is great for that. [0]https://github.com/alangrainger/immich-public-proxy

If you are worried about that then I can highly recommend https://github.com/alangrainger/immich-public-proxy I keep that running on a VPS, but with with proper firewalling you could probably run it on the same machine.

Immich alone may not be sufficient, but immich-public-proxy might be: https://github.com/alangrainger/immich-public-proxy Check out the sample gallery: https://immich-demo.note.sx/share/gJfs8l4LcJJrBUpjhMnDoKXFt1...

After coming across a brief tutorial of mTLS in this tool for locking down access to my family photo sharing [0] I have bounced around the internet following various guides but haven't ended up with a pfx file that I can install in a browser. Can you recommend any resource to understand which keys sign what, and what a client certificate is verified against? The guides I find often contain the openssl incantations with little explanation so I feel a bit like stumbling through the dark. I realize how much I've taken stacktraces for granted when this auth stuff is very "do or do not, there is no error" [0] https://github.com/alangrainger/immich-public-proxy/blob/mai...

I'm moving my family out of apple photos, self hosted options have come a long way. I landed on immich [0] and a caddy plugin that allows for PKI certificate for account access while still allowing public shared URLs [1]* There's also LibrePhotos which is packed with features but doesn't have as much polish as immich. They do however have a list of python libraries that can be used for offline/local inference for things like having an image model create a description of a photo that can benefit the full text search. [2] [0] https://immich.app/ [1] https://github.com/alangrainger/immich-public-proxy/blob/mai... [2] https://docs.librephotos.com/docs/user-guide/offline-setup * Haven't actually tried this plugin yet, my weekend project is setting up my caddy VPS to tunnel to the immich container running on my Synology NAS