{
  services = {
    immich = {
      enable = true;
      accelerationDevices = null;
      redis.enable = true;
      openFirewall = true;
      host = "::";
    };
    # immich-public-proxy = { enable = true; openFirewall = true; immichUrl = "http://localhost:2283"; };
  };
  users.users.immich.extraGroups = [ "video" "render" ];
}