diff --git a/hosts/sakura/services/immich-proxy.nix b/hosts/sakura/services/immich-proxy.nix new file mode 100644 index 0000000..d5153d2 --- /dev/null +++ b/hosts/sakura/services/immich-proxy.nix @@ -0,0 +1,8 @@ +_: { + services.immich-public-proxy = { + enable = true; + port = 2284; + openFirewall = true; + immichUrl = "https://immich.internal.flake.sh"; + }; +} diff --git a/hosts/sora/services/traefik.nix b/hosts/sora/services/traefik.nix index 1369057..0abecc7 100644 --- a/hosts/sora/services/traefik.nix +++ b/hosts/sora/services/traefik.nix @@ -178,6 +178,13 @@ tls.domains = [{main = "*.${pqdn}";}]; tls.certresolver = "production"; }; + immich-proxy = { + rule = "Host(`immich.${pqdn}`)"; + entrypoints = ["websecure"]; + service = "immich-proxy"; + tls.domains = [{main = "*.${pqdn}";}]; + tls.certresolver = "production"; + }; }; services = let sakuraIp = "100.121.201.47:"; @@ -200,6 +207,7 @@ searxng.loadBalancer.servers = [{url = "http://${sakuraIp}8100";}]; justlog.loadBalancer.servers = [{url = "http://${sakuraIp}8025";}]; wastebin.loadBalancer.servers = [{url = "http://${sakuraIp}8088";}]; + immich-proxy.loadBalancer.servers = [{url = "http://${sakuraIp}2284";}]; # tsuru woodpecker.loadBalancer.servers = [{url = "http://100.82.146.40:8200";}]; @@ -212,7 +220,7 @@ api.insecure = false; global = { checkNewVersion = false; - sendAnonymousUsage = true; + sendAnonymousUsage = false; }; entryPoints = { websecure = { diff --git a/hosts/yuki/services/immich.nix b/hosts/yuki/services/immich.nix index ce0d20a..3399227 100644 --- a/hosts/yuki/services/immich.nix +++ b/hosts/yuki/services/immich.nix @@ -13,5 +13,10 @@ _: { database = { createDB = true; }; + settings = { + server = { + externalDomain = "https://immich.flake.sh"; + }; + }; }; }