Server: add immich

roles/server/default.nix

@@ -18,5 +18,6 @@
     ./grafana.nix
     ./prometheus.nix
     ./changedetection-io.nix
+    ./immich.nix
   ];
 }

roles/server/immich.nix

@@ -0,0 +1,24 @@
+{...}: {
+  services.immich = {
+    enable = true;
+    settings = {
+      server.externalDomain = "https://photos.everest.tailscale";
+      server.publicUsers = false;
+    };
+  };
+  # Add a record for transmission
+  services.headscale.settings.dns.extra_records = [
+    {
+      name = "photos.everest.tailscale";
+      type = "A";
+      value = "100.100.0.1";
+    }
+  ];
+  services.caddy.virtualHosts.immich = {
+    hostName = "photos.everest.tailscale";
+    extraConfig = ''
+      import tailscale
+      reverse_proxy localhost:2283
+    '';
+  };
+}