feat: run immich

dns/dnsconfig.js

···
 	A('bin', '69.61.2.203', TTL(300)),
 	A('ci', '69.61.2.203', TTL(300)),
 	A('write', '69.61.2.203', TTL(300)),
-	// vultr -> nulled: lituus
+	A('photos', '69.61.2.203', TTL(300)),
+	// vultr: lituus
 	A('@', '45.77.48.108', TTL(300)),
 	A('jitsi', '45.77.48.108', TTL(300)),
 	A('chat', '45.77.48.108', TTL(300)),

hosts/box/default.nix

···
       # "/home/anish/usr/nonfiction" # syncthing
       "/home/anish/usr/finance" # beancount
       "/mnt/two/postgres" # sealight postgres backups TODO remove once moved to capsul
+      "/mnt/two/photos"
+      "/mnt/two/music"
     ];
     # seafile
   };

hosts/helix/default.nix

···
   };
 
   # Reverse proxy for immich
-  services.nginx.virtualHosts."photos.sealight.xyz" = {
-    enableACME = true;
-    forceSSL = true;
+  # services.nginx.virtualHosts."photos.sealight.xyz" = {
+  #   enableACME = true;
+  #   forceSSL = true;
 
-    locations."/" = {
-      extraConfig = ''
-        proxy_pass http://10.0.69.4:8567;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-      '';
-    };
-  };
+  #   locations."/" = {
+  #     extraConfig = ''
+  #       proxy_pass http://10.0.69.4:8567;
+  #       proxy_set_header Host $host;
+  #       proxy_set_header X-Real-IP $remote_addr;
+  #       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  #       proxy_set_header X-Forwarded-Proto $scheme;
+  #     '';
+  #   };
+  # };
 
   services.postgresql.package = pkgs.postgresql_15;
   services.postgresqlBackup = {

hosts/profiles/immich/default.nix

···
-{ ... }:
+{ pkgs, config, ... }:
 {
   services.immich = {
     enable = true;
···
     };
     host = "0.0.0.0";
     port = 8567;
-    mediaLocation = "/data/photos";
-    externalDomain = "https://photos.sealight.xyz";
+    mediaLocation = "/mnt/two/photos";
+    openFirewall = true;
+    settings.server.externalDomain = "https://photos.sealight.xyz";
   };
   services.nginx.virtualHosts."photos.mossnet.lan" = {
     enableACME = false;
     forceSSL = false;
 
     locations."/" = {
+      proxyPass = "http://127.0.0.1:${toString config.services.immich.port}";
+      proxyWebsockets = true;
+      recommendedProxySettings = true;
       extraConfig = ''
-        proxy_pass http://127.0.0.1:8567/;
+        client_max_body_size 50000M;
+        proxy_read_timeout   600s;
+        proxy_send_timeout   600s;
+        send_timeout         600s;
       '';
     };
   };