Immich

flake.nix

@@ -339,6 +339,7 @@
               ./modules/nixos/torrentbox.nix
               ./modules/nixos/minio_server.nix
               ./modules/nixos/nextcloud.nix
+              ./modules/nixos/immich.nix
               # ./modules/nixos/garage.nix
               # ./modules/nixos/ntfy.nix
               # S3 cache read

instances/baldur/configuration.nix

@@ -114,6 +114,20 @@
             '';
           };
 
+          "immich.bertof.net" = ssl // {
+            locations."/" = {
+              proxyPass = "http://heimdall.tsn:2283";
+              proxyWebsockets = true;
+              recommendedProxySettings = true;
+              extraConfig = ''
+                client_max_body_size 50000M;
+                proxy_read_timeout   600s;
+                proxy_send_timeout   600s;
+                send_timeout         600s;
+              '';
+            };
+          };
+
           # "ntfy.bertof.net" = ssl // {
           #   locations."/" = {
           #     proxyPass = "http://heimdall.tsn:7080/";

instances/heimdall/configuration.nix

@@ -109,6 +109,9 @@ in
         };
       };
     };
+
+    immich.mediaLocation = "/mnt/raid/immich";
+
     music-assistant = {
       enable = true;
       providers = [ "chromecast" "dlna" "filesystem_local" "hass" "hass_players" "jellyfin" "player_group" "radiobrowser" "soundcloud" "tidal" ];

modules/nixos/immich.nix

@@ -0,0 +1,13 @@
+{
+  services = {
+    immich = {
+      enable = true;
+      accelerationDevices = [ "/dev/dri/renderD128" ];
+      redis.enable = true;
+      openFirewall = true;
+      host = "::";
+    };
+    # immich-public-proxy = { enable = true; openFirewall = true; immichUrl = "http://localhost:2283"; };
+  };
+  users.users.immich.extraGroups = [ "video" "render" ];
+}