feat: immich

hosts/architect/immich.nix

@@ -0,0 +1,35 @@
+{ config, pkgs, lib, ... }:
+
+let
+  domain = "photos.giugl.io";
+in
+{
+  disabledModules = [ "services/web-apps/immich.nix" ];
+  services = {
+    immich = {
+      enable = true;
+      package = pkgs.unstablePkgs.immich;
+      accelerationDevices = null;
+      # settings.server.externalDomain = "https://${domain}";
+    };
+  };
+
+  architect.vhost.${domain} = {
+    dnsInterfaces = [ "tailscale" "lan" ];
+    locations."/" = {
+      host = "[::1]";
+      port = config.services.immich.port;
+      allowLan = true;
+      allowWAN = true;
+      allow = [ config.architect.networks."tailscale".net ];
+      proxyWebsockets = true;
+      extraConfig = ''
+        # allow large file uploads
+        client_max_body_size 50000M;
+      '';
+    };
+  };
+
+
+  users.users.immich.extraGroups = [ "video" "render" "media" "nextcloud" ];
+}