_: {
  services.immich-public-proxy = {
    enable = true;
    port = 2284;
    openFirewall = true;
    immichUrl = "https://immich.internal.flake.sh";
  };
}