Raphaël Numbus
123 lines
3.4 KiB
Nix
123 lines
3.4 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
# Version tagging
|
|
immichVersion = "v2.5.6";
|
|
redisVersion = "9@sha256:546304417feac0874c3dd576e0952c6bb8f06bb4093ea0c9ca303c73cf458f63";
|
|
databaseVersion = "14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23";
|
|
# Helper
|
|
helper = import ./lib.nix { inherit config pkgs lib; };
|
|
cfg = config.numbus.services.${name};
|
|
# Container configuration
|
|
name = "immich";
|
|
in
|
|
|
|
helper.mkPodmanService {
|
|
inherit name;
|
|
description = "Immich, Google Photos but better";
|
|
pod = "immich";
|
|
defaultPort = "2283";
|
|
generatedSecrets = {
|
|
DB_NAME = "xkcdpass -n 2 -d -";
|
|
DB_USERNAME = "xkcdpass -n 2 -d -";
|
|
DB_PASSWORD = "xkcdpass -n 8 -d -";
|
|
};
|
|
importedSecrets = {
|
|
REDIS_HOSTNAME = "immich-redis";
|
|
DB_HOSTNAME = "immich-database";
|
|
UPLOAD_LOCATION = "${cfg.dataDir}";
|
|
DB_DATA_LOCATION = "${cfg.configDir}/database";
|
|
TZ = "${time.timeZone}";
|
|
};
|
|
dirPermissions = [
|
|
"100999:users ${cfg.dataDir}"
|
|
"100999:users ${cfg.configDir}"
|
|
];
|
|
|
|
# Compose file good
|
|
composeText = ''
|
|
services:
|
|
immich-server:
|
|
container_name: immich-server
|
|
hostname: immich-server
|
|
image: ghcr.io/immich-app/immich-server:${immichVersion}
|
|
user: '1000:1000'
|
|
networks:
|
|
immich:
|
|
ports:
|
|
- "${cfg.port}:2283/tcp"
|
|
volumes:
|
|
- $UPLOAD_LOCATION:/data
|
|
- /etc/localtime:/etc/localtime:ro
|
|
env_file:
|
|
- .env
|
|
depends_on:
|
|
- immich-redis
|
|
- immich-database
|
|
healthcheck:
|
|
disable: false
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- NET_RAW
|
|
restart: unless-stopped
|
|
immich-machine-learning:
|
|
container_name: immich-machine-learning
|
|
hostname: immich-machine-learning
|
|
image: ghcr.io/immich-app/immich-machine-learning:${immichVersion}
|
|
user: '1000:1000'
|
|
networks:
|
|
immich:
|
|
volumes:
|
|
- ${cfg.configDir}/model-cache:/cache
|
|
- ${cfg.configDir}/machine-learning-config:/usr/src/.config
|
|
- ${cfg.configDir}/machine-learning-cache:/usr/src/.cache/
|
|
env_file:
|
|
- .env
|
|
healthcheck:
|
|
disable: false
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- NET_RAW
|
|
restart: unless-stopped
|
|
immich-redis:
|
|
container_name: immich-redis
|
|
hostname: immich-redis
|
|
image: docker.io/valkey/valkey:${redisVersion}
|
|
user: '1000:1000'
|
|
networks:
|
|
immich:
|
|
healthcheck:
|
|
test: redis-cli ping || exit 1
|
|
restart: unless-stopped
|
|
immich-database:
|
|
container_name: immich-database
|
|
hostname: immich-database
|
|
image: ghcr.io/immich-app/postgres:${databaseVersion}
|
|
user: '1000:1000'
|
|
networks:
|
|
immich:
|
|
environment:
|
|
POSTGRES_PASSWORD: $DB_PASSWORD
|
|
POSTGRES_USER: $DB_USERNAME
|
|
POSTGRES_DB: $DB_NAME
|
|
POSTGRES_INITDB_ARGS: '--data-checksums'
|
|
volumes:
|
|
- $DB_DATA_LOCATION:/var/lib/postgresql/data
|
|
shm_size: 128mb
|
|
healthcheck:
|
|
disable: false
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
cap_drop:
|
|
- NET_RAW
|
|
restart: unless-stopped
|
|
networks:
|
|
immich:
|
|
name: immich
|
|
driver: bridge
|
|
'';
|
|
} |