mathieu/system-config
1
0
Fork 0
Code Issues Packages Activity Actions

Add immich

Browse source
This commit is contained in:
Mathieu Strypsteen 2024-11-19 13:17:18 +01:00
parent ef3f107367
commit 916f55fde0
Signed by: mathieu
GPG key ID: 782A42E461BC6824
14 changed files with 60 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
container-config/nginx-home/matrix
View file

@ -2,10 +2,10 @@ server {
server_name matrix.strypsteen.com;
listen 443 ssl;
listen [::]:443 ssl;
include snippets/headers.conf;
location / {
set $upstream home.server.home.arpa;
proxy_pass http://$upstream:8005;
include snippets/proxy.conf;
proxy_hide_header Content-Security-Policy;
}
}

14
container-config/nginx-home/photos Normal file
View file

@ -0,0 +1,14 @@
server {
server_name photos.strypsteen.com;
listen 443 ssl;
listen [::]:443 ssl;
include snippets/headers.conf;
location / {
set $upstream home.server.home.arpa;
proxy_pass http://$upstream:8006;
include snippets/proxy.conf;
proxy_http_version 1.1;
proxy_set_header Connection upgrade;
proxy_set_header Upgrade $http_upgrade;
}
}

1
home/etc/containers/systemd/borgmatic.container.d/override.conf
View file

@ -1,3 +1,4 @@
[Container]
Network=immich.network
Network=postgresql.network
Secret=POSTGRES_PASSWORD,type=env

7
home/etc/containers/systemd/immich-ml.container Normal file
View file

@ -0,0 +1,7 @@
[Container]
Image=ghcr.io/immich-app/immich-machine-learning:release
Network=immich.network
Volume=immich-ml.volume:/cache:U,Z
AutoUpdate=registry
[Install]
WantedBy=multi-user.target

0
home/etc/containers/systemd/immich-ml.volume Normal file
View file

8
home/etc/containers/systemd/immich-postgresql.container Normal file
View file

@ -0,0 +1,8 @@
[Container]
Image=docker.io/tensorchord/pgvecto-rs:pg16-v0.3.0
Network=immich.network
Volume=immich-postgresql.volume:/var/lib/postgresql/data:U,Z
Secret=POSTGRES_PASSWORD,type=env
AutoUpdate=registry
[Install]
WantedBy=multi-user.target

0
home/etc/containers/systemd/immich-postgresql.volume Normal file
View file

7
home/etc/containers/systemd/immich-valkey.container Normal file
View file

@ -0,0 +1,7 @@
[Container]
Image=cgr.dev/chainguard/valkey
Network=immich.network
Volume=immich-valkey.volume:/data:U,Z
AutoUpdate=registry
[Install]
WantedBy=multi-user.target

0
home/etc/containers/systemd/immich-valkey.volume Normal file
View file

15
home/etc/containers/systemd/immich.container Normal file
View file

@ -0,0 +1,15 @@
[Unit]
Requires=immich-ml.service immich-postgresql.service immich-valkey.service
After=immich-ml.service immich-postgresql.service immich-valkey.service
[Container]
Image=ghcr.io/immich-app/immich-server:release
Network=immich.network
Volume=immich.volume:/usr/src/app/upload:U,Z
Environment=DB_HOSTNAME=systemd-immich-postgresql
Environment=DB_USERNAME=immich
Environment=REDIS_HOSTNAME=systemd-immich-valkey
Secret=DB_PASSWORD,type=env
PublishPort=10.0.1.2:8006:2283
AutoUpdate=registry
[Install]
WantedBy=multi-user.target

3
home/etc/containers/systemd/immich.network Normal file
View file

@ -0,0 +1,3 @@
[Network]
IPv6=true
Options=isolate=true

0
home/etc/containers/systemd/immich.volume Normal file
View file

4
setup-qubes-fedora.sh
View file

@ -3,7 +3,9 @@ set -euo pipefail
cp -R desktop/* qubes-fedora/* /
dnf config-manager setopt qubes-vm-r4.2-security-testing.enabled=true
dnf config-manager setopt qubes-vm-r4.2-current-testing.enabled=true
dnf install --allowerasing bash-color-prompt bash-completion borgbackup bind-utils butane default-fonts fcitx5-anthy fcitx5-autostart fedora-flathub-remote ffmpeg-free file-roller fuse-sshfs gcc gcc-gdb-plugin glibc-all-langpacks helm htop kubernetes-client nautilus netcat nodejs-npm pipx qubes-ctap ShellCheck toolbox wireguard-tools whois xdg-desktop-portal-gtk yt-dlp
dnf config-manager setopt rpmfusion-free.enabled=true
dnf config-manager setopt rpmfusion-free-updates.enabled=true
dnf install --allowerasing bash-color-prompt bash-completion borgbackup bind-utils butane default-fonts fcitx5-anthy fcitx5-autostart fedora-flathub-remote ffmpeg file-roller fuse-sshfs gcc gcc-gdb-plugin glibc-all-langpacks helm htop kubernetes-client nautilus netcat nodejs-npm pipx qubes-ctap ShellCheck toolbox wireguard-tools whois xdg-desktop-portal-gtk yt-dlp
dnf remove cheese evolution-data-server firefox gnome-software gnome-weather PackageKit-command-not-found rpmfusion-nonfree-release thunderbird totem
sh setup-desktop.sh
all_proxy=127.0.0.1:8082 flatpak remote-add --if-not-exists flathub /usr/lib/fedora-third-party/conf.d/fedora-flathub.flatpakrepo

1
setup-vyos.sh
View file

@ -13,6 +13,7 @@ set system static-host-mapping host-name home.strypsteen.com alias metrics.stryp
set system static-host-mapping host-name home.strypsteen.com alias monitoring.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias network.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias office.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias photos.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias remote-desktop.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias vault.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias xmr.strypsteen.com