Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Immich 3.0

github.com

Post reply on HN
Print view View original

241–250 of 313 posts

Re: Immich 3.0

#241

Post by FabCH »

TalkingCodeMonk wrote: post #205
FabCH wrote: post #180

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…

FYI the setup you mention is not "end-to-end" encrypted. E2EE means client-to-client encrypted, with the server processing encrypted bits only. Your approach is encryption in transit and at rest. At rest is relatively irrelevent for large cloud providers, as they are probably better at managing the lifecycle of disks than most businesses or people. It's unlikely someone's going to physically rob a data center or end…

I do happen to have some experience.

For 99.99% of the population, does the threat model really include targeted NSA attack with higher probability than „Google’s automated system sent the police to my door“? No, no it doesn’t.

It is demonstrably more secure for even a semi experienced sysop to host Immich for their family than for them to use Google/Apple.

But I do agree that _some_ experience is required.

Re: Immich 3.0

#242

Post by FabCH »

sylens wrote: post #228
FabCH wrote: post #180

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…

This is not end to end encryption. There is nothing stopping you (or Hetzner) from accessing your family’s data, as one the disks are mounted to a host they are decrypted and available for use. True E2EE would be that all data on those disks is encrypted by the client your family uses, so even if you combed through the disk volume you would only see cipher text

This is only true if you are so highly individualistic you don’t consider a family unit as a single entity.

If you consider nuclear family as an entity, it’s e2ee. Practically.

Putting aside the fact that yes, the server can be compromised if somebody chose to attach to the live RAM and recover keys. But practically, nobody will. Same way Google will not deliver a special compromised image of the mobile app on my phone, even though they completely can.

Re: Immich 3.0

#243

Post by FabCH »

internet_points wrote: post #199
FabCH wrote: post #180

A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…

how much storage and how much do you pay Hetzner?

Prices have jumped considerably, but basically anything on Server Auction is good https://www.hetzner.com/sb/

I pay 60/month for 50 TB with a 10 year old intel xenon.

Re: Immich 3.0

#244

Post by neogodless »

poisonborz wrote: post #138

I wish they would better support external image sources - images not uploaded/managed by Immich, just a folder of images it has access to - especially if it's read only. It mostly works, but the UI and logic breaks in a lot of little ways.

Yup. I love Immich, but I'm also a control freak, so my 25 years of digital photos I had before using Immich still exist in an External Library. It mostly works but I still have some issues. Like I keep getting a batch of ~70 photos that lose their "date taken" and revert to the date/time I started using Immich. (Fortunately the file names are date/times and I can manually go through and fix them, but having done it at least three times, it's getting old!)

I "restarted" maybe twice when I first got into Immich to find a good set up for playing reasonably nicely with external libraries, but it does need just a bit more polish. Good to see a sibling comment that it's on their list of priorities!

Hackers

The coolest thing I've done with Immich is just set up Docker on a more powerful machine, run the machine learning libraries, and point my instance (on a low powered server) to use that external computing for face recognition and OCR. Very cool!

Re: Immich 3.0

#245

Post by totetsu »

I have a bunch of spare s3 compatable storage from a cloud provider which I would really like to use to run Immich, but everytime i look into it it seems not possible.

Re: Immich 3.0

#247

Post by duskdozer »

AussieWog93 wrote: post #120
gchamonlive wrote: post #114

Earlier quoted context omitted.

It's encryption both at rest and on transit. At rest there are levels of encryption, at object level or at filesystem level. E2ee for immich would mean the objects are encrypted and transmitting the data is encrypted. If the scenario is the server is stolen, you need encryption at rest. Even at FS level is enough.

Not sure why you're continuing to argue, GP's right. e2ee means that the encryption keys are stored client-side by the intended recipient. It's not just in transit and in rest.

I've seen a lot of companies use "e2ee" to basically just mean encryption during transit, not even in rest. It's wrong, but I can see where this idea can propagate.

Re: Immich 3.0

#248

Post by bjackman »

palata wrote: post #200
bjackman wrote: post #172

Earlier quoted context omitted.

I really don't think you want E2EE for this. I host storage for family and friends, I haven't set Immich up yet (don't think I'd have space for everyone's photos) but the choice is between: 1. "Hey just so you know, I have access to everything you upload here". 2. "Do NOT lose your password or your data will be GONE FOREVER and I CANNOT get it back". I definitely prefer 1 and I'm sure my users do too. They shouldn't…

I do agree that this is a use-case. Now a use-case for E2EE is if you want to host it on a VPS, I would say. I wouldn't trust the VPS with the photos of my friends/family.

Ah yeah I see. I guess the fallback there would be to split the service up into a remote encrypted storage layer that goes on the VPS and then host the actual service (with the decryption keys) locally?

But ISTR reading Immich kinda assumes the storage is on a plain local filesystem so you get perf issues if you do something clever under its feet. Could be out of date on that.

Re: Immich 3.0

#249

Post by DavideNL »

onel wrote: post #227
DavideNL wrote: post #4

I don't want yet another self hosted service to manage (update, backups, possible hardware failures, energy costs, ups, etc.). Unfortunately Immich is not end-to-end encrypted. If that would have be the case i'd use https://pixelunion.eu/ Seems like a great app though. So... i'm still pondering what to do :-)

There are simpler options now to self-host these kinds of apps. It's not that hard anymore

Sure!

However, i also want the availability of my photos to be reliable, just like e-mail. It always has to work, wherever i am.

When i'm on the road, and there's some random issue due to power outage, database corruption, or whatever else, i don't want to have to wait until i get back home and make the time to fix things.

On the other hand, when i'm self hosting something like an RSS reader or Jellyfin to stream videos, it's less of an issue. That can wait a few days or weeks until i can fix it.

Re: Immich 3.0

#250

Post by flossly »

FabCH wrote: post #242
sylens wrote: post #228

Earlier quoted context omitted.

This is not end to end encryption. There is nothing stopping you (or Hetzner) from accessing your family’s data, as one the disks are mounted to a host they are decrypted and available for use. True E2EE would be that all data on those disks is encrypted by the client your family uses, so even if you combed through the disk volume you would only see cipher text

This is only true if you are so highly individualistic you don’t consider a family unit as a single entity. If you consider nuclear family as an entity, it’s e2ee. Practically. Putting aside the fact that yes, the server can be compromised if somebody chose to attach to the live RAM and recover keys. But practically, nobody will. Same way Google will not deliver a special compromised image of the mobile app on my pho…

It's a definition question. E2ee means in this cases that "the server" cannot decipher the data: the keys to that are only on the client and never shared with the server.

This setup simply does fit the definition. And trying to say it is "e2ee practically" is a bit dishonest: there is no definition for "practical e2ee".

The point of e2ee is that you do not have to trust the server (see Bitwarden for instance).

Post reply on HN