Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Immich

Open source Photo organizing app with local AI. https://immich.app

Prerequisites

By default, immich does not create an admin user, instead offering a setup page on initial startup. This should be prevented by creating an initial admin user with environment variables. See the adminPasswordFile option.

Usage

momo-cloud.immich = {
  enable = true;
  oidcSecretFile = config.age.secrets."immich-oidc-secret".path;
  adminPasswordFile = config.age.secrets."immich-admin-password".path;
};

Secrets

To generate the OIDC secret for oidcSecretFile, used by services.kanidm.provision, you can use xxd:

xxd -u -l 32 -p /dev/urandom

The admin password file holds the pasword for the initial admin user that gets created during the setup. To generate:

xxd -u -l 32 -p /dev/urandom