From e8cb4436b2d48116fa2d2d6f5a81c9fa4cfcdb55 Mon Sep 17 00:00:00 2001
From: Noah Pederson <noah@packetlost.dev>
Date: Wed, 02 Jul 2025 14:42:55 +0000
Subject: [PATCH] ADD: immich

---
 services.nix | 22 ++++++++++++++++++++++
 coredns/ngp.computer.hosts | 2 ++
 2 file(s) changed, 24 insertion(s)(+), 0 deletion(s)(-)

diff --git a/services.nix b/services.nix
--- a/services.nix
+++ b/services.nix
@@ -321,6 +321,13 @@
     openFirewall = true;
   };
 
+  services.immich = {
+    enable = true;
+    accelerationDevices = [ "/dev/dri/renderD128" ];
+    mediaLocation = "/srv/shokuhou/pictures/immich";
+  };
+  users.users.immich.extraGroups = [ "video" "render" "nas" ];
+
   # Nginx Reverse SSL Proxy
   services.nginx = {
     enable = true;
@@ -338,6 +345,21 @@
     virtualHosts."cache.packetlost.dev" = {
       locations."/".proxyPass =
         "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
+    };
+    virtualHosts."photos.ngp.computer" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://[::1]:${toString config.services.immich.port}";
+        proxyWebsockets = true;
+        recommendedProxySettings = true;
+        extraConfig = ''
+          client_max_body_size 50000M;
+          proxy_read_timeout   600s;
+          proxy_send_timeout   600s;
+          send_timeout         600s;
+        '';
+      };
     };
     virtualHosts."img.ngp.computer" = {
       forceSSL = true;
diff --git a/coredns/ngp.computer.hosts b/coredns/ngp.computer.hosts
--- a/coredns/ngp.computer.hosts
+++ b/coredns/ngp.computer.hosts
@@ -1,5 +1,7 @@
 192.168.1.3 img.ngp.computer
+192.168.1.3 photos.ngp.computer
 192.168.1.3 misaki.ngp.computer
 
 fe80::9ab7:85ff:fe1e:dfe8 img.ngp.computer
+fe80::9ab7:85ff:fe1e:dfe8 photos.ngp.computer
 fe80::9ab7:85ff:fe1e:dfe8 misaki.ngp.computer

--
tangled.sh