Hi everyone, I’m doing the switch from iCloud Photos to self-hosted Immich. Already have the server and storage figured out, but before have everything set up I do want to know something: Before I set on doing this plan I did my research and found out that Immich needs some sort of VPN for on-the-go access. Right now I only have access to Cloudflare’s WARP service. My questions are, 1- Is it possible to use that as my Immich access VPN?, and 2- If yes, how would you do that once I set up everything? Thanks in advance for any help, whenever I will do something that is new to me I make sure to know exactly what I’m going into.
You don’t have to. I am using OAuth using Cloudflare Authentication. So everything needs to pass Cloudflare authentication before it can reach Immich. So its directly accessible via internet. My home server is using Cloudflare tunnel and I already enabled view Cloudflare features that auto blocks bots, IPs outside of my home country etc.
https://github.com/immich-app/immich/discussions/8299
I also setup crowdsec to read my logs to block bad IPs. But I doubt it will even by pass Cloudflare authentication in the first place. So I am not worried much.
Not exactly the reply you’re asking for, but I’m using Tailscale for this. It’s working very well.
Just keep in mind that going through Cloudflare tunnels will result in an 100MB file upload limit.
Immich does not need VPN for on-the-go access if you expose it to the public Internet. However, VPN is important if you value your privacy and security.
Thanks, I’ll definitely set up the extra security. I had no idea that was a thing, I just heard about WARP and started using it tbh lol. Thanks again!
When you say 100mb is that at a time? A day? Biggest file size? I’m researching this cuz I’m planning on setting up the same in my unraid server
Only if Immich is exposed as and accessed through a public hostname. If you use WARP to connect through the tunnel to a local IP, there’s no limit.
So essentially no videos. That’s pretty important.
It’s fine, I can just add them in my server
My comment came off way more snarky than I meant it.