Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Self-hosting my photos with Immich

michael.stapelberg.ch

Post reply on HN
Print view View original

301–310 of 384 posts

Re: Self-hosting my photos with Immich

#301

Post by lucb1e »

nickthegreek wrote: post #47
vvpan wrote: post #10

Earlier quoted context omitted.

Can you elaborate? What role does Tailscale play? I selfhost and have heard about Tailscale but couldn't figure out how it's used.

Tailscale routes my mobile device dns through my pile back at the home. I have nginx setup with easy to remember domains (photos.my domain.com) that work when i’m away as well without exposing anything to the open internet.

Why not call it VPN if that's what it is? In your case, it sounds like configuring your "pile" (is that a DNS server, short for pihole maybe?) on your phone would do the same thing, but if the goal is to not expose anything to the open internet, a VPN would be the thing that does that

Re: Self-hosting my photos with Immich

#302

Post by lucb1e »

tjpnz wrote: post #33
vvpan wrote: post #10

Earlier quoted context omitted.

Can you elaborate? What role does Tailscale play? I selfhost and have heard about Tailscale but couldn't figure out how it's used.

Tailscale gives me access to my home network when I'm not at home. I can be on a train, in another country even, and watch shows streamed off the Raspberry Pi in my home office.

That's called a VPN

Is this like "Band-Aid" that used to be a brand name but now people just use it generically?

Re: Self-hosting my photos with Immich

#303

Post by lucb1e »

UltraSane wrote: post #39
vvpan wrote: post #10

Earlier quoted context omitted.

Can you elaborate? What role does Tailscale play? I selfhost and have heard about Tailscale but couldn't figure out how it's used.

With tailscale on your server and endpoints you can access the server from anywhere without even having to open any ports. It is like magic.

If you don't open ports, how can it reach your internal services to allow you access to them?

Re: Self-hosting my photos with Immich

#304

Post by HNisCIS »

DeepSeaTortoise wrote: post #162
trizic wrote: post #56

There is something to be said about NixOS, it really is a matter of setting `services.immich.enable = true;` in a configuration file. I find this really powerful and simpler than docker and docker-compose. But don't get me wrong, I am all for containerization when it comes to other OS/distros. Yes, there is a learning curve for the Nix language and creating your own packages. But anyone who can install a distro can i…

Regarding NixOS, I'm mostly afraid of them going on a user purge after their developer purge. You just never know who this group of people will come after next, especially after they started defining "Fascism" as "anyone asking for how they define Fascism". And the jump of getting rid of people you hate who contribute to your project and you can do little harm to, to getting rid of people you hate who are of no use t…

To provide some opinionated context for this unhinged rant:

The community developing nix had a falling out with a couple highly unsavory groups that basically consisted of the Palmer Lucky Slaughter Bot Co. and a couple guys who keep trying to monetize the project in extremely sleazy ways. This wasn't some sort of Stalinistic purge, it was people rejecting having their name attached to actual murder and sleazy profiteering.

Re: Self-hosting my photos with Immich

#305

Post by lucb1e »

andrew_eu wrote: post #102
cromka wrote: post #95

Immich is great, but I like Ente more because of the E2E encryption. I don't trust that someday my hardware wouldn't get stolen and all photos get in possession of someone else.

Ente looks interesting and worth looking into, thanks for mentioning it. In the context of having a phone stolen, it's possible to at least limit the damage and revoke accesses via the Tailscale control server. Then the files on device are still vulnerable, but not everything in Immich (or whatever other service is running).

Why would you need Tailscale for revoking an access token in an unrelated service? Just kick the device out of the sessions list in Immich, or change your password if that's stored directly on the device

Re: Self-hosting my photos with Immich

#306

Post by lucb1e »

Groxx wrote: post #23

I'll throw in another "+1, quite satisfied with immich" comment, because I'm honestly that impressed. The project as a whole feels competent . Stuff that should be fast is fast. E.g. upload a few tens of thousands of photos (saturates my wifi just fine), wait for indexing and thumbnailing to finish, and then jump a few years in the scroll bar - odds are very good that it'll have the thumbnails fully rendered in like…

> the image folder structure is very nearly your full data, with metadata files along side the images

Wait, other comments were saying that one of Immich's weak points is backups. Someone else replied that the postgres structure is sane so you can run sql queries to get your data out if needed. Now you're saying it's plain old files. I'm confused

Re: Self-hosting my photos with Immich

#307

Post by black_knight »

black_knight wrote: post #291
conradev wrote: post #89

Earlier quoted context omitted.

This is my favorite use of CLI AI coding tools: updating my nix config. I can just ask my computer to configure services for me!

Indeed! This morning I needed a service to port forward ssh from my server to a firewalled machine, to access stuff while I work from a mountain cabin over the next few days. ChatGPT gave me a nice nix config snippet, and it just worked! Auto reconnecting and everything.

I would of course have thrown up a port forward manually today, and maybe even spent the time to add a service later, but now it was fixed once and “forever” in two minutes!

Re: Self-hosting my photos with Immich

#308

Post by hughes »

renegade-otter wrote: post #181

Immich is a Google Photos clone, and when they say "self-hosting", they mean SELF-HOSTING. You need to be a web dev or a sys admin to be able to wrangle that thing. Nightmare upgrades, tons of weird bugs related to syncing. If your solution to an issue is "just reset the Redis cache", this is when I am done. Immich solves the wrong problem. I just want the household to share photos - I don't want to host a Google Pho…

I have to agree. I tried using it for a few months and it left me convinced I'll be paying for iCloud photos for the rest of my life.

Re: Self-hosting my photos with Immich

#309

Post by Scandiravian »

maccard wrote: post #293
Scandiravian wrote: post #256

Earlier quoted context omitted.

I think the sibling answer by oasisaimlessly is really good. I'd supplement it by saying that because you can have the entire configuration in a git repo, you can see what you've changed at what point in time I'm the beginning I was doing one change, writing that change down in some log, then doing another change (this I'll mess up in about five minutes) Now I'm creating a new commit, writing a description for it to…

> because you can have the entire configuration in a git repo, you can see what you've changed at what point in time That’s true of docker too.

I'm not really sure what your point is, but I'll try to take it in good faith and read it as "why doesn't docker solve the problem for it, since you can also keep those configurations in a git repo?"

If any kind of apt upgrade or similar command is run in a dockerfile, it is no longer reproducible. Because of this it's necessary to keep track of which dockerfiles do that and keep track of when a build was performed; that's more out-of-band logging. With NixOS I will get the exact same system configuration if I build the same commit (barring some very exotic edge cases)

Besides that, docker still needs to run on a system, which must also be maintained, so Docker only partly addresses a subset of the issue

If Docker works for you and you're not facing any issues with such a setup, then that's great. NixOS is the best solution for me

Re: Self-hosting my photos with Immich

#310

Post by slater »

HauntedDrum wrote: post #297
DeepSeaTortoise wrote: post #162

Earlier quoted context omitted.

Regarding NixOS, I'm mostly afraid of them going on a user purge after their developer purge. You just never know who this group of people will come after next, especially after they started defining "Fascism" as "anyone asking for how they define Fascism". And the jump of getting rid of people you hate who contribute to your project and you can do little harm to, to getting rid of people you hate who are of no use t…

Honestly one of the funniest things I've read on HN in a while. Would you call yourself anti-anti-fascist?

They're likely just doing the ol' "what opinions, mfer" goose meme.
Post reply on HN