Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

91–100 of 313 posts

Re: Immich 3.0

#91

Post by Grombobulous »

Jhsto wrote: post #9
DavideNL wrote: post #4

I don't want yet another self hosted service to manage (update, backups, possible hardware failures, energy costs, ups, etc.). Unfortunately Immich is not end-to-end encrypted. If that would have be the case i'd use https://pixelunion.eu/ Seems like a great app though. So... i'm still pondering what to do :-)

You can use https://ente.com/ (it's open-source). It also makes the seemingly much better decision of storing photos in S3.

Ente’s cloud-hosted solution does not use S3:

https://ente.com/reliability/

For self-hosting, “S3” usually just means “S3-compatible.” Although maybe that’s exactly what you meant.

Re: Immich 3.0

#92

Post by hamdingers »

BeetleB wrote: post #83
hamdingers wrote: post #62

Earlier quoted context omitted.

> Lessons from using self hosted image services years ago: Alternate title: "Outdated lessons I haven't re-evaluated"

Are you saying there are never backward incompatible changes? Are you saying there's no need to back up the underlying DB? Are you saying I can keep an insurance running for, say, three years and it'll be trivial to upgrade after that?

I'm saying your contribution is outdated and irrelevant, and my primary intention in commenting is to label it as such for any passers-by who might think you're talking about the current state Immich.

That sad, I'm happy to answer your questions. I've run Immich in docker for 3 years with automatic updates through watchtower. Updates are frequent but require no effort from me and have never broken anything, nor is there an "update script" to fail. Nor have I encountered "corruption" at any point. I do back up the database and my photo library.

I'm glad you're happy with your solution, you can share it without disparaging other solutions you're unfamiliar with.

Re: Immich 3.0

#93

Post by Grombobulous »

AussieWog93 wrote: post #87
Grombobulous wrote: post #84

Earlier quoted context omitted.

I think we can imagine a scenario where not all of our photos are non-sensitive. I also imagine that a true E2EE architecture means you have more flexibility with cloud storage, managed hosting, and off-site backups.

I hear ya, I was being a little bit over the top. But I really do think that for every one user who would turn on e2ee and get some genuine benefit out of it, there would be a dozen that turn it on because "encryption good" and accidentally lose all their data.

True, e2ee is pretty scary as far as data loss.

Still, good application design can help mitigate that. Apple does it with their e2ee recovery methods, although Ente does rely on a recovery key that you should print out and put in a safe as well as store in other safe locations.

But also, what I love about the E2EE of Ente is that I can securely use a cloud hosted provider but then my home NAS backups are unencrypted.

The Ente desktop app has a continuous export feature where I just leave the application on my main desktop computer and it constantly backs it up to my home NAS. It also does the local machine learning and video streaming encoding processing on the desktop.

So, if I lose my Ente account, no big deal. I get another one and wipe everything and restore from my NAS backup.

I feel like this is the best of all worlds. I get cloud convenience and no real self-hosting burden along with solid ownership of my data.

Perhaps Immich doesn’t bother with e2ee since it’s primarily designed for self-hosting, while for Ente it’s meant to be suitable for both a paid cloud service and self-hosting.

Re: Immich 3.0

#94

Post by Grombobulous »

Panda4 wrote: post #56
oliyoung wrote: post #41

Immich is such a no-brainer replacement for Apple Photos or Google Photos, combined with VPN like Tailscale, it's almost a drop in replacement

Is there any side effects of leaving the phone connected to Tailscale VPN all day?

If you are okay with internet exposure on some level, Cloudflare Tunnel is a really fantastic product:

https://developers.cloudflare.com/tunnel/

It’s obviously not a magical security layer that eliminates all issues related to public Internet exposure, but in my opinion it is good enough for the average home user.

Re: Immich 3.0

#95

Post by dawnerd »

Panda4 wrote: post #56
oliyoung wrote: post #41

Immich is such a no-brainer replacement for Apple Photos or Google Photos, combined with VPN like Tailscale, it's almost a drop in replacement

Is there any side effects of leaving the phone connected to Tailscale VPN all day?

I leave my phone connected 24/7 and don’t notice any downsides. Only have to disable it on some networks when traveling to make awful captive portals work.

Re: Immich 3.0

#97

Post by 1una »

Grombobulous wrote: post #94
Panda4 wrote: post #56

Earlier quoted context omitted.

Is there any side effects of leaving the phone connected to Tailscale VPN all day?

If you are okay with internet exposure on some level, Cloudflare Tunnel is a really fantastic product: https://developers.cloudflare.com/tunnel/ It’s obviously not a magical security layer that eliminates all issues related to public Internet exposure, but in my opinion it is good enough for the average home user.

Note that Cloudflare Tunnel blocks requests above 100MiB, which makes it impossible to upload long videos. This is being addressed in https://github.com/immich-app/immich/pull/22385

Re: Immich 3.0

#98

Post by cevn »

WillDaSilva wrote: post #78
mock-possum wrote: post #77

Earlier quoted context omitted.

I got into Ente because I wanted to create photo upload links on a per-even basis - I can tell all my friends, if you take pics or video tonight, upload it at this URL - and it just works. No app necessary, very simple, very cheap. Then from there, I got the photo backup / archive service because why not. They really are pretty much just what they appear to be. Im a fan.

For what it's worth, Immich supports this too. You can create an album (for each event), create a shared link, allow public anonymous uploads for the shared link, and then give the link to everyone at the event, and ask them to upload their photos. It can be done from any web browser.

I would love to know if there's a way to secure this though. I'm not prepared to have people constantly trying to login to my immich instance so it's only accessible via VPN

Re: Immich 3.0

#99

Post by EvanAnderson »

l11r wrote: post #80
oliyoung wrote: post #41

Immich is such a no-brainer replacement for Apple Photos or Google Photos, combined with VPN like Tailscale, it's almost a drop in replacement

Are there any side effects of leaving Immich public? I think people overestimate the risks. Just update your stuff regularly, follow simple rules, and set up something like CrowdSec. I know it's simpler to just use Tailscale and similar tools, but recently I see the trend that people don't even consider otherwise.

I'd throw it behind Wireguard, personally. Belt and suspenders.

(I keep meaning to look at it and keep kicking it down the road.)

Re: Immich 3.0

#100

Post by cevn »

Panda4 wrote: post #56
oliyoung wrote: post #41

Immich is such a no-brainer replacement for Apple Photos or Google Photos, combined with VPN like Tailscale, it's almost a drop in replacement

Is there any side effects of leaving the phone connected to Tailscale VPN all day?

I remember having problems using tailscale vpn 24/7 and pihole on my home network with the phone pointed at the 192.168 address for DNS. Pages would take 5s to resolve and start loading.

Unfortunately, Pihole was less important than Tailscale and I have to put up with mobile ads.

Post reply on HN