Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

221–230 of 313 posts

Re: Immich 3.0

#221

Post by mvdtnz »

ivanjermakov wrote: post #187
tclancy wrote: post #86

Earlier quoted context omitted.

They’re literally on a disk drive I can physically touch. I think I can figure out a migration strategy for that.

It's tricky with iOS. Plugging iPhone into a server is stupid. Adding server as a network storage in Files app is smarter, but downloading photos this way does not guarantee deduplication. Would be great if Immmich iOS app had a restore functionality as convenient as existing backup functionality.

You migrate from the server, not the client. You seem confused about what Immich is.

Re: Immich 3.0

#223

Post by troupo »

cromka wrote: post #194
troupo wrote: post #176

Earlier quoted context omitted.

> they do not make it easy to import from other servicesvlike Google Photos or iCloud Because those services are closed black boxes that don't really let you access them except in a very roundabout way?

No. They're not. You export photos using Google Takeout, iCloud has something similar. And their own iOS app also has unresolved bugs because of which I can't fully import my gallery. There's no "black box" magic here. Sure, there are some edge cases that need to be handled when importing the exported dataset, but it's all documented.

> No. They're not. You export photos using Google Takeout, iCloud has something similar.

So, they are black boxes that don't make things easy or convenient for people. E.g. Google Takeout separates images and their metadata. With people running into issues like this: https://www.reddit.com/r/googlephotos/comments/1lqx331/googl... (as comments point out, Google just randomly changes file names as well, which breaks import tools)

> Sure, there are some edge cases that need to be handled when importing the exported dataset, but it's all documented.

As in: it's not really documented. Those takeouts, iCloud and Google shenanigans etc. have been reverse engineered by people to work. Meanwhile for closest friends only Apple, Google and some of their closes friends provide a way to transfer libraries directly, without "takeouts" and workarounds: https://portmap.dtinit.org/

Re: Immich 3.0

#224

Post by [deleted] »

PhilipRoman wrote: post #132
nicce wrote: post #43

Earlier quoted context omitted.

Their primary purpose is usually encrypt the connection between different endpoints… by creating virtual private networks…

When we talk about "E2EE" messenger apps, that usually means more than just using HTTPS. VPNs can certainly help with encryption in transit, but that's a very different concept. Unfortunately this comes up a lot, with people asking if Immich supports end-to-end encryption and getting told to use LUKS or Tailscale.

[deleted]

Re: Immich 3.0

#225

Post by onel »

gchamonlive wrote: post #106
AussieWog93 wrote: post #82

So many comments here about missing end to end encryption, but seriously - why would anyone want this? Lets say burglars break in and steal your homelab. Because you don't have e2ee, they can see all the photos you saved of your dead grandmother! Oh no! Or, in the more likely scenario that something happens to your phone, the lack of e2ee means that even if you lost your keys you didn't lose the only memories that re…

If they steal your homelab, e2ee doesn't help, it's encryption at rest. E2ee is for rogue devices sniffing the network, which is more or less of a concern depending on your setup. I'd not have unencrypted traffic in my network if I had for instance those shady TV boxes.

This. I think encryption is the job of the underlying operating system not the app running on top of it

Re: Immich 3.0

#226

Post by troupo »

cromka wrote: post #192
gotbeans wrote: post #175

Earlier quoted context omitted.

In the same universe, I took a google takeout last week to migrate to immich, 12k photos/videos. I set up immich backed by ceph last week and I got everything migrated via immich-go, with all metadata albums and all. Had to change some parallelization option, but otherwise it was a breeze.

It seemed like that for me, too, until I realized my photos were botched. The only way to know that was looking into the logs: I have some 9000 photos which it silently fails to extract metadata from. The only sign in the UI that something is off is the fact those 9k photos never get processed, you can try in perpetuity. The logs reveal they were botched either by immich-go or iOS app, ffmpeg freaks out when processi…

> mmich gives you that clean, very easy UX/UI, targeting every regular user as a real alternative to Google or Apple offerings, yet you can't easily and safely import your photos. That's inconsistent at best. Misleading.

How do you imagine this wold work, given that there are no APIs for Google Photos or iCloud Photos to batch import them into a different service while preserving all data. At best you can work with the Gallery/Photos access on your phone.

Re: Immich 3.0

#227

Post by onel »

DavideNL wrote: post #4

I don't want yet another self hosted service to manage (update, backups, possible hardware failures, energy costs, ups, etc.). Unfortunately Immich is not end-to-end encrypted. If that would have be the case i'd use https://pixelunion.eu/ Seems like a great app though. So... i'm still pondering what to do :-)

There are simpler options now to self-host these kinds of apps. It's not that hard anymore

Re: Immich 3.0

#228

Post by sylens »

FabCH wrote: post #180

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…

This is not end to end encryption. There is nothing stopping you (or Hetzner) from accessing your family’s data, as one the disks are mounted to a host they are decrypted and available for use.

True E2EE would be that all data on those disks is encrypted by the client your family uses, so even if you combed through the disk volume you would only see cipher text

Re: Immich 3.0

#229

Post by outime »

cromka wrote: post #193
MrDresden wrote: post #178

Earlier quoted context omitted.

The amount of entitlement on display here is astounding.

What entitlement? Did I say I DEMAND something? DID I? You can't criticize a free project because God forbid that makes you entitled? And how do you know I haven't donated and don't regularly do so?

If I had to guess, the last paragraph of your original comment comes across as very harsh.

Re: Immich 3.0

#230

Post by sylens »

esperent wrote: post #173
kristopolous wrote: post #30

Earlier quoted context omitted.

for people wondering: "Ente Photos is a paid service, but we offer 10GB of free storage. You can also >>clone this repository and choose to self-host So both forms... https://github.com/ente/ente

I've been bitten too many times - is Ente a commercial product that pays lip service to self hosting as form of marketing, but with friction to guide you towards the hosted version (e.g. rocketchat and many others) or does it genuinely support self hosting as a first class product?

The latter, it works quite well
Post reply on HN