sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: rekey immich secrets, allow influx access from local service net

Browse source
This commit is contained in:
oddlama 2025-09-14 17:31:40 +02:00
parent 0537f69d5e
commit 3dc6133a1a
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
20 changed files with 51 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

9
hosts/sire/guests/immich.nix
View file

@ -52,11 +52,14 @@ in
services.immich = {
enable = true;
host = "0.0.0.0";
# We use VectorChord from the beginning
database.enableVectors = false;
environment = {
IMMICH_LOG_LEVEL = "verbose";
IMMICH_TRUSTED_PROXIES = lib.concatStringsSep "," [
globals.wireguard.proxy-home.hosts.ward-web-proxy.ipv4
globals.wireguard.proxy-sentinel.hosts.sentinel.ipv4
];
};
settings = {
@ -269,9 +272,9 @@ in
client_max_body_size 50G;
proxy_buffering off;
proxy_request_buffering off;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
send_timeout 600s;
proxy_read_timeout 1200s;
proxy_send_timeout 1200s;
send_timeout 1200s;
allow ${globals.net.home-lan.vlans.home.cidrv4};
allow ${globals.net.home-lan.vlans.home.cidrv6};
# Firezone traffic