Added the rest of the configuration. Still some things to add.

modules/services/immich.nix

@@ -15,6 +15,14 @@ helper.mkPodmanService {
   name = "immich";
   pod = "immich";
   defaultPort = "2283";
+  useSopsSecrets = true;
+
+  extraConfig = {
+    numbus.services.immich.secretMapping = {
+      DB_PASSWORD = "db_password";
+      DB_USERNAME = "db_username"; # Assuming you add this to schema
+    };
+  };
 
 # Compose file good
   composeText = ''