#immich

I also should probably reblog some things onto this blog, I should follow more programmers

So, what have I been up to?

Using my old laptop I’ve started my own homelab, currently it really only runs Jellyfin, but I have some plans (Octoprint for my ender; Immich, both for my parents and for my photography).

I got into college, and learned that I hate calculus.

Though I don’t think it will ever be directly useful, I now know MARS MIPS assembly and how to build a simple CPU.

I started learning Pico-8 but gave up once summer began, I intend to go back to it at some point

I got an internship at a CRO, which is what I’m doing currently, they had me learning SAS for the past 3 weeks, and now I’ve moved on to the formatting stuff like SDTM and ADaM.

What am I planning to do

As mentioned earlier, I want to pick Pico-8 back up, and properly learn lua.

I’m interested in trying to use dart and flutter to remake my portfolio, which I also want to host on my aforementioned homelab.

I want to keep making games, but I realized that everything I’ve made so far has been way out of my scope, so I’ll be focusing on smaller games for the foreseeable future.

My roommates next year are planning to build a compass that always points towards the nearest liquor store, and I’m in charge of the code, I’ve already got a few ideas but I’m not sure what’ll work.

Anyway, thanks for reading

“No processing happens on the tablet, it is just a display for the image output. In fact, you won’t even have much of configuration options since all of that is done through a config file. My tablet, which feels sluggish for practically everything, can handle this within the browser just fine. It loads quickly, transitions are smooth, and it doesn’t crash. What else can you ask for?”

Any old tablet that at least has a browser on it, can run this kiosk mode view of Immich photos, albums, people, memories, and a lot more. Good to see in the config that you can limit it to specific albums or people only, or hide specific albums or people. So the admin will just need to apply their mind to that side of things.

Another alternative to this is Immich Public Proxy which requires each album to be configured and shared manually, but has the ultimate security as a result.

Immich Kiosk’s website also has a demo that you can try to see how it actually works.

I was worried if a Pi could actually handle this, but by offloading the hardware intensive tasks to a docker container on my PC, it seems to run quite stable?

I accidentally installed an old version at first that wasn't compatible with the app, and I think I've seen every error you can possibly get, did some stupid stuff myself like accidentally putting image: image: in the .yml file

But it finally works now, and by using tailscale I should probably be able to access my photos even from outside my local network. I'll have to see how stable it actually is on a Pi once the scan is finished but this might become my iCloud replacement c:

Immich is a wonderful bit of software, but since it holds all your private photos it’s best to keep it fully locked down. This presents a problem when you want to share a photo or a gallery with someone. To view a shared album in Immich, you need access to the /api/ path. If you’re sharing a gallery with the public, you need to make that path public. Any existing or future vulnerability has the potential to compromise your Immich instance. I’m not aware of any such vulnerability existing right now.

Immich Public Proxy provides a barrier of security between the public and Immich, and only allows through requests which you have publicly shared.

It is stateless and does not know anything about your Immich instance. It does not require an API key which reduces the attack surface even further. The only things that the proxy can access are photos that you have made publicly available in Immich, and it strips out most metadata such as locations, camera details, comments, etc.

This video will show how it operates and give some pointer son setting it up, and will also show a workaround I’m using to provide a public landing page for all your shared links on Immich, and how to nest a group of sub-albums on a webpage.