Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

171–180 of 313 posts

Re: Immich 3.0

#171

Post by azuanrb »

Larrikin wrote: post #65
azuanrb wrote: post #50

Earlier quoted context omitted.

No, it’s an Immich issue. Not OP, but I was already using Synology Photos. Synology finished syncing my library in two days, while Immich was still syncing after more than a week. I decided it wasn’t worth it after that experience.

Why are you syncing from your phone instead of your Synology then? Can't you sync from your NAS then just have pictures uploaded as you take them? iOS has a lot of restrictions compared to Android so two days really doesn't feel like a meaningful difference from a week.

The 2 days were spent uploading my entire library from scratch. After that, daily syncs only take a few minutes.

I don’t think this should be framed as iOS vs Android. From a technical perspective, I understand why the behavior differs. But from a user’s perspective, all they see is that one app works much better than the other.

My family doesn’t care about the technical reasons. They just saw one app finish much sooner than the other, and they preferred the one that worked better. Based on that experience, I can’t recommend Immich to them.

Re: Immich 3.0

#172

Post by bjackman »

eddythompson80 wrote: post #112
AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

It would make hosting a "Family and/or friends" instance possible. I do go back and forth on the accessibility tradeoffs of E2EE for average people though. In this scenario, lose or forget your key/password and you lose ALL of your photos which are very important to some people. Losing them is pretty catastrophic. Google Photos or iPhotos really gives people a sense of security about their photos. ps: It would also m…

I really don't think you want E2EE for this. I host storage for family and friends, I haven't set Immich up yet (don't think I'd have space for everyone's photos) but the choice is between:

1. "Hey just so you know, I have access to everything you upload here".

2. "Do NOT lose your password or your data will be GONE FOREVER and I CANNOT get it back".

I definitely prefer 1 and I'm sure my users do too. They shouldn't upload it if they didn't trust me anyway.

In my case I follow it up with "and I might actually go digging around in your files if I need to debug something or you're wasting disk space". But I think you could also follow it up with "but I do promise not to look" and that would be valid too.

This whole thing only makes sense for people you're pretty close to.

(I do tell people not to back up their password managers on my system though).

I guess maybe for Immich specifically it would be nice to have a "vault" feature where people can upload nudes etc where they are willing to trade risk of loss for privacy on a per-photo basis.

Re: Immich 3.0

#173

Post by esperent »

kristopolous wrote: post #30
Cider9986 wrote: post #26

When I was switching to GrapheneOS from iOS, I decided to self host my photos. I considered Immich, but I settled on Ente because of the encryption. Ente Photos is extremely polished and it's comparable quality to Apple photos. It's cool they keep the server open and selfhostable instead of only open clients like many e2ee projects do. I like how you can share an album and anyone can contribute to it without an accou…

for people wondering: "Ente Photos is a paid service, but we offer 10GB of free storage. You can also >>clone this repository and choose to self-host So both forms... https://github.com/ente/ente

I've been bitten too many times - is Ente a commercial product that pays lip service to self hosting as form of marketing, but with friction to guide you towards the hosted version (e.g. rocketchat and many others) or does it genuinely support self hosting as a first class product?

Re: Immich 3.0

#175

Post by gotbeans »

cromka wrote: post #160

I have a different bash with them than the lack of E2EE: they do not make it easy to import from other servicesvlike Google Photos or iCloud, which should be a priority. They rely on immich-go project, which is ridden with bugs and basically abandonware by now. Their own iOS app, which can also be used for syncing iCloud gallery, has outstanding, 2 y/o or so bugs that will fail to upload the Live Motion photos. My ph…

In the same universe, I took a google takeout last week to migrate to immich, 12k photos/videos.

I set up immich backed by ceph last week and I got everything migrated via immich-go, with all metadata albums and all.

Had to change some parallelization option, but otherwise it was a breeze.

Re: Immich 3.0

#176

Post by troupo »

cromka wrote: post #160

I have a different bash with them than the lack of E2EE: they do not make it easy to import from other servicesvlike Google Photos or iCloud, which should be a priority. They rely on immich-go project, which is ridden with bugs and basically abandonware by now. Their own iOS app, which can also be used for syncing iCloud gallery, has outstanding, 2 y/o or so bugs that will fail to upload the Live Motion photos. My ph…

> they do not make it easy to import from other servicesvlike Google Photos or iCloud

Because those services are closed black boxes that don't really let you access them except in a very roundabout way?

Re: Immich 3.0

#178

Post by MrDresden »

cromka wrote: post #160

I have a different bash with them than the lack of E2EE: they do not make it easy to import from other servicesvlike Google Photos or iCloud, which should be a priority. They rely on immich-go project, which is ridden with bugs and basically abandonware by now. Their own iOS app, which can also be used for syncing iCloud gallery, has outstanding, 2 y/o or so bugs that will fail to upload the Live Motion photos. My ph…

The amount of entitlement on display here is astounding.

Re: Immich 3.0

#180

Post by FabCH »

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now.

Hetzner community provides official full-disk encryption documentation:

https://community.hetzner.com/tutorials/install-debian-with-...

Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy that handles SSL for you.

Add cron based automated backup of the entire Immich data to a local encrypted NAS and there you go. Reliable, end-to-end, encrypted at rest setup. So far, it required exactly 0 maintenance.

It’s also more secure because I just drop traffic from all but 3 geographies at the IP level. And you can also add a WAP on the Nginx proxy.

It is also more more secure than Google/iCloude because the „employee of the company“ attack vector is much smaller. It’s documented that Google looks at your photos and is perfectly happy to file false police reports: https://www.eff.org/deeplinks/2022/08/googles-scans-private-...

By comparison, yes it is theoretically possible for Hetzner employees to access my server physically and extract the encryption key from RAM, or setup a fake SSH server to try to steal the key, but that is far more complicated attack and hasn’t been documented yet. And it risks detection.

Post reply on HN