311–313 of 313 posts
Earlier quoted context omitted.
I would love to know if there's a way to secure this though. I'm not prepared to have people constantly trying to login to my immich instance so it's only accessible via VPN
You can use something like Immich Public Proxy to only expose the /share path of your server and keep the main /api path that has everything else behind VPN
A lot of people talking about encryption in the comment section, thought I would share my setup. I have been running Immich for family and friends on a Hetzner auction server for about 1.5 years now. Hetzner community provides official full-disk encryption documentation: https://community.hetzner.com/tutorials/install-debian-with-... Letsencrypt gives free reliable SSL. You can easily hide Immich behind Nginx proxy t…
FYI the setup you mention is not "end-to-end" encrypted. E2EE means client-to-client encrypted, with the server processing encrypted bits only. Your approach is encryption in transit and at rest. At rest is relatively irrelevent for large cloud providers, as they are probably better at managing the lifecycle of disks than most businesses or people. It's unlikely someone's going to physically rob a data center or end…
> After months of hard work from the team and our amazing contributors, we're thrilled to announce the next major version of Immich: v3.0.0!
A quite amazing open source project, that COMPLETELY FAILS to explain to a newcomer what it is, what problem it solves, etc.