• 0 Posts
  • 41 Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle

  • Sure, I set it up in nixos though this is the short form of that:

    spoiler
    1. Install Podman and passt + slirp4netns for networking
    2. Setup subuid and subgid usermod --add-subuids 100000-165535 --add-subgids 100000-165535 johndoe
    3. I’m using quadlet’s so we need to create those: $HOME/.config/containers/systemd/immich-database.container
    [Unit]
    Description=Immich Database
    Requires=immich-redis.service immich-network.service
    
    [Container]
    AutoUpdate=registry
    EnvironmentFile=${immich-config} # add your environment variables file here
    Image=registry.hub.docker.com/tensorchord/pgvecto-rs:pg14-v0.2.0@sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0 # hash from the official docker-compose, has to be updated from time to time
    Label=registry
    Pull=newer # update to newest image, though this image is specified by hash and will never update to another version unless the hash is changed
    Network=immich.network # attach to the podman network
    UserNS=keep-id:uid=999,gid=999 # This makes uid 999 and gid 999 map to the user running the service, this is so that you can access the files in the volume without any special handling otherwise root would map to your uid and the uid 999 would map to some very high uid that you can't access without podman - This modifies the image at runtime and may make the systemd service timeout, maybe increase the timeout on low-powered machines 
    Volume=/srv/services/immich/database:/var/lib/postgresql/data # Database persistance
    Volume=/etc/localtime:/etc/localtime:ro # timezone info
    Exec=postgres -c shared_preload_libraries=vectors.so -c 'search_path="$user", public, vectors' -c logging_collector=on -c max_wal_size=2GB -c shared_buffers=512MB -c wal_compression=on # also part of official docker-compose.....last time i checked anyways
    [Service]
    Restart=always
    

    $HOME/.config/containers/systemd/immich-ml.container

    [Unit]
    Description=Immich Machine Learning
    Requires=immich-redis.service immich-database.service immich-network.service
    
    [Container]
    AutoUpdate=registry
    EnvironmentFile=${immich-config} #same config as above
    Image=ghcr.io/immich-app/immich-machine-learning:release
    Label=registry
    Pull=newer # auto update on startup
    Network=immich.network
    Volume=/srv/services/immich/ml-cache:/cache # machine learning cache
    Volume=/etc/localtime:/etc/localtime:ro
    
    [Service]
    Restart=always
    

    $HOME/.config/containers/systemd/immich.network

    [Unit]
    Description=Immich network
    
    [Network]
    DNS=8.8.8.8
    Label=app=immich
    
    $HOME/.config/containers/systemd/immich-redis.container
    [Unit]
    Description=Immich Redis
    Requires=immich-network.service
    
    [Container]
    AutoUpdate=registry
    Image=registry.hub.docker.com/library/redis:6.2-alpine@sha256:eaba718fecd1196d88533de7ba49bf903ad33664a92debb24660a922ecd9cac8 # should probably change this  to valkey.... 
    Label=registry
    Pull=newer # auto update on startup
    Network=immich.network
    Timezone=Europe/Berlin
    
    [Service]
    Restart=always
    

    $HOME/.config/containers/systemd/immich-server.container

    [Unit]
    Description=Immich Server
    Requires=immich-redis.service immich-database.service immich-network.service immich-ml.service
    
    [Container]
    AutoUpdate=registry
    EnvironmentFile=${immich-config} #same config as above
    Image=ghcr.io/immich-app/immich-server:release
    Label=registry
    Pull=newer # auto update on startup
    Network=immich.network
    PublishPort=127.0.0.1:2283:2283
    Volume=/srv/services/immich/upload:/usr/src/app/upload # i think you can put images here to import, though i never used it
    Volume=/etc/localtime:/etc/localtime:ro # timezone info
    Volume=/srv/services/immich/library:/imageLibrary # here the images are stored once imported
    
    [Service]
    Restart=always
    
    [Install]
    WantedBy=multi-user.target default.target
    
    1. systemctl --user daemon-reload
    2. systemctl --user enable --now immich-server.service
    3. enable linger so systemd user services run even if the user is logged of loginctl enable-linger $USER
    4. Setup a reverse proxy like caddy so you can make access to it simple like immich.mini-pc.localnet




  • Instead of using systemd user services you can just use a normal systemd service and tell it to run the command as a specific user, put something like this in a file at /etc/systemd/system/<unit Name>.service

    [Unit]
    Description=Run service as user test
    After=network.target
    
    [Service]
    Type=simple
    User=test
    Group=test
    ExecStart=/opt/teamspoke
    
    [Install]
    WantedBy=default.target
    

    Then set it to start at boot

    systemctl enable <unit Name>.service
    

    And to start it now

    systemctl start <unit Name>.service
    








  • DNS turns a domain name into an IP which can then be used to send data through your router, a dns server is the server which is used to do this conversion (www.google.com turns into an IP 1.2.3.4 (that isn’t the actual IP of google)).

    There are many dns servers, normally your local devices use your router as the dns server, which forwards it to your ISP which they further transfer it over global dns servers.

    Alternatively you could use Google’s DNS server (8.8.8.8) or cloudflares DNS server (1.1.1.1) but if the one on your router works then just use it.

    nameserver is the same as DNS server

    Tldr: set the router IP as your dns server, you only need this one.


  • …that’s the valid response, does ping www.google.com work and curl www.google.com return a bunch of text?

    If ping www.google.com doesn’t work then your system isn’t using the correct dns server, though your local dns server works (as seen by the prior dig).

    If curl works then…you have a working internet connection, maybe check the browser settings for proxy or something.