[marvin] update immich config

hosts/marvin/services/immich-config.json

···
     "gopSize": 0,
     "maxBitrate": "0",
     "preferredHwDevice": "auto",
-    "preset": "ultrafast",
+    "preset": "veryfast",
     "refs": 0,
     "targetAudioCodec": "aac",
     "targetResolution": "720",
···
     "smtp": {
       "enabled": true,
       "from": "dishNet Photos <[e-mail]>",
+      "replyTo": "",
       "transport": {
         "host": "mail.pyrox.dev",
         "ignoreCert": false,
-        "port": 587,
+        "port": 25,
         "secure": true,
         "username": "[e-mail]"
       }
···
   "oauth": {
     "autoLaunch": false,
     "autoRegister": true,
-    "buttonText": "dishNet Auth",
+    "buttonText": "Login with Pocket-ID",
     "clientId": "f1312240-d9fc-4336-aca6-b98316867848",
     "defaultStorageQuota": null,
     "enabled": true,
-    "issuerUrl": "https://auth.pyrox.dev/.well-known/openid-configuration",
+    "issuerUrl": "https://auth.pyrox.dev",
     "mobileOverrideEnabled": false,
     "mobileRedirectUri": "",
     "profileSigningAlgorithm": "none",
···
     "enabled": true
   },
   "server": {
+    "externalDomain": "https://img.pyrox.dev",
     "loginPageMessage": "",
     "publicUsers": true
   },

hosts/marvin/services/immich.nix

···
-{ self, config, ... }:
+{
+  self,
+  config,
+  lib,
+  ...
+}:
 let
   d = self.lib.data.services.immich;
 in
···
       redis.enable = true;
       mediaLocation = "/var/media/photos/";
       accelerationDevices = [ "/dev/dri/renderD128" ];
-      settings = (builtins.fromJSON (builtins.readFile ./immich-config.json)) // {
+      settings = lib.recursiveUpdate (builtins.fromJSON (builtins.readFile ./immich-config.json)) {
         oauth.clientSecret._secret = config.age.secrets.immich-oauth-secret.path;
         notifications.smtp.transport.password._secret = config.age.secrets.immich-mail-pw.path;
         server.externalDomain = "https://${d.extUrl}";
···
     immich-public-proxy = {
       enable = true;
       port = d.pubProxy;
-      immichUrl = "localhost:${toString d.port}";
+      immichUrl = "http://localhost:${toString d.port}";
       settings.ipp = {
         downloadedFilename = 1;
       };
     };
   };
+  systemd.services.immich-public-proxy.environment.PUBLIC_BASE_URL = "https://${d.extUrl}";
   users.users.immich.extraGroups = [
     "video"
     "render"