Immich

Administration

• Admin credentials are stored in [TODO].
• Take care not to touch the external libraries unless you know what you're doing; those are used to link users' Nextcloud data to their Immich accounts.

Container setup

Immich runs in docker compose. All relevant files can be found in /root/immich on guayusa.

Access

In /root/immich on guayusa:

• docker compose exec -it database psql -U postgres immich will get you a psql shell in the Immich Postgres database.
• curl https://photos.csclub.uwaterloo.ca/api/* or curl https://localhost:2283/api/* lets you access the Immich API. You'll need to create an API key through the web UI -> Administration, then pass it in as the `x-api-key` header.

Nginx

The Immich setup piggybacks off the nginx instance running in the Nextcloud container. Once you've gained access to the container via sudo machinectl shell nextcloud, the nginx config can be found at /etc/nginx/sites-available/immich.

Linking Nextcloud

Every user who has logged into both Immich and Nextcloud will have an external library created in Immich, following the naming convention [watiam]'s Library. This allows Immich to access the user's images stored in Nextcloud, located at /var/lib/machines/nextcloud/data/nextcloud-data/[watiam]/files.

The libraries are created by the script /root/immich/sync-libraries.sh. It's in the root user's crontab, set to run every hour.

OIDC setup

OAuth can be configured in the web UI -> Administration from the admin account. Documentation.