commit 263d5d2462880f120590ba23b5fbe41e3c41d9e2 · pyrox.dev/nix

+6 -4

hosts/marvin/services/immich-config.json

···

       18
        
           "gopSize": 0,

     

       19
        
           "maxBitrate": "0",

     

       20
        
           "preferredHwDevice": "auto",

     

       21
       -
           "preset": "ultrafast",

     

       22
        
           "refs": 0,

     

       23
        
           "targetAudioCodec": "aac",

     

       24
        
           "targetResolution": "720",

     
···

       158
        
           "smtp": {

     

       159
        
             "enabled": true,

     

       160
        
             "from": "dishNet Photos <immich@pyrox.dev>",

     

       0
        
       
     

       161
        
             "transport": {

     

       162
        
               "host": "mail.pyrox.dev",

     

       163
        
               "ignoreCert": false,

     

       164
       -
               "port": 587,

     

       165
        
               "secure": true,

     

       166
        
               "username": "immich@pyrox.dev"

     

       167
        
             }

     
···

       170
        
         "oauth": {

     

       171
        
           "autoLaunch": false,

     

       172
        
           "autoRegister": true,

     

       173
       -
           "buttonText": "dishNet Auth",

     

       174
        
           "clientId": "f1312240-d9fc-4336-aca6-b98316867848",

     

       175
        
           "defaultStorageQuota": null,

     

       176
        
           "enabled": true,

     

       177
       -
           "issuerUrl": "https://auth.pyrox.dev/.well-known/openid-configuration",

     

       178
        
           "mobileOverrideEnabled": false,

     

       179
        
           "mobileRedirectUri": "",

     

       180
        
           "profileSigningAlgorithm": "none",

     
···

       193
        
           "enabled": true

     

       194
        
         },

     

       195
        
         "server": {

     

       0
        
       
     

       196
        
           "loginPageMessage": "",

     

       197
        
           "publicUsers": true

     

       198
        
         },

···

       18
        
           "gopSize": 0,

     

       19
        
           "maxBitrate": "0",

     

       20
        
           "preferredHwDevice": "auto",

     

       21
       +
           "preset": "veryfast",

     

       22
        
           "refs": 0,

     

       23
        
           "targetAudioCodec": "aac",

     

       24
        
           "targetResolution": "720",

     
···

       158
        
           "smtp": {

     

       159
        
             "enabled": true,

     

       160
        
             "from": "dishNet Photos <immich@pyrox.dev>",

     

       161
       +
             "replyTo": "",

     

       162
        
             "transport": {

     

       163
        
               "host": "mail.pyrox.dev",

     

       164
        
               "ignoreCert": false,

     

       165
       +
               "port": 25,

     

       166
        
               "secure": true,

     

       167
        
               "username": "immich@pyrox.dev"

     

       168
        
             }

     
···

       171
        
         "oauth": {

     

       172
        
           "autoLaunch": false,

     

       173
        
           "autoRegister": true,

     

       174
       +
           "buttonText": "Login with Pocket-ID",

     

       175
        
           "clientId": "f1312240-d9fc-4336-aca6-b98316867848",

     

       176
        
           "defaultStorageQuota": null,

     

       177
        
           "enabled": true,

     

       178
       +
           "issuerUrl": "https://auth.pyrox.dev",

     

       179
        
           "mobileOverrideEnabled": false,

     

       180
        
           "mobileRedirectUri": "",

     

       181
        
           "profileSigningAlgorithm": "none",

     
···

       194
        
           "enabled": true

     

       195
        
         },

     

       196
        
         "server": {

     

       197
       +
           "externalDomain": "https://img.pyrox.dev",

     

       198
        
           "loginPageMessage": "",

     

       199
        
           "publicUsers": true

     

       200
        
         },

+9 -3

hosts/marvin/services/immich.nix

···

       1
       -
       { self, config, ... }:

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       2
        
       let

     

       3
        
         d = self.lib.data.services.immich;

     

       4
        
       in

     
···

       11
        
             redis.enable = true;

     

       12
        
             mediaLocation = "/var/media/photos/";

     

       13
        
             accelerationDevices = [ "/dev/dri/renderD128" ];

     

       14
       -
             settings = (builtins.fromJSON (builtins.readFile ./immich-config.json)) // {

     

       15
        
               oauth.clientSecret._secret = config.age.secrets.immich-oauth-secret.path;

     

       16
        
               notifications.smtp.transport.password._secret = config.age.secrets.immich-mail-pw.path;

     

       17
        
               server.externalDomain = "https://${d.extUrl}";

     
···

       20
        
           immich-public-proxy = {

     

       21
        
             enable = true;

     

       22
        
             port = d.pubProxy;

     

       23
       -
             immichUrl = "localhost:${toString d.port}";

     

       24
        
             settings.ipp = {

     

       25
        
               downloadedFilename = 1;

     

       26
        
             };

     

       27
        
           };

     

       28
        
         };

     

       0
        
       
     

       29
        
         users.users.immich.extraGroups = [

     

       30
        
           "video"

     

       31
        
           "render"

···

       1
       +
       {

     

       2
       +
         self,

     

       3
       +
         config,

     

       4
       +
         lib,

     

       5
       +
         ...

     

       6
       +
       }:

     

       7
        
       let

     

       8
        
         d = self.lib.data.services.immich;

     

       9
        
       in

     
···

       16
        
             redis.enable = true;

     

       17
        
             mediaLocation = "/var/media/photos/";

     

       18
        
             accelerationDevices = [ "/dev/dri/renderD128" ];

     

       19
       +
             settings = lib.recursiveUpdate (builtins.fromJSON (builtins.readFile ./immich-config.json)) {

     

       20
        
               oauth.clientSecret._secret = config.age.secrets.immich-oauth-secret.path;

     

       21
        
               notifications.smtp.transport.password._secret = config.age.secrets.immich-mail-pw.path;

     

       22
        
               server.externalDomain = "https://${d.extUrl}";

     
···

       25
        
           immich-public-proxy = {

     

       26
        
             enable = true;

     

       27
        
             port = d.pubProxy;

     

       28
       +
             immichUrl = "http://localhost:${toString d.port}";

     

       29
        
             settings.ipp = {

     

       30
        
               downloadedFilename = 1;

     

       31
        
             };

     

       32
        
           };

     

       33
        
         };

     

       34
       +
         systemd.services.immich-public-proxy.environment.PUBLIC_BASE_URL = "https://${d.extUrl}";

     

       35
        
         users.users.immich.extraGroups = [

     

       36
        
           "video"

     

       37
        
           "render"