snowflake/hosts/sakura/services/immich-proxy.nix

_: {
  services.immich-public-proxy = {
    enable = true;
    port = 2284;
    openFirewall = true;
    immichUrl = "https://immich.internal.flake.sh";
  };
}