Immich is a wonderful bit of software, but since it holds all your private photos it's best to keep it fully locked down. This presents a problem when you want to share a photo or a gallery with someone. To view a shared album in Immich, you need access to the /api/ path. If you're sharing a gallery with the public, you need to make that path public. Any existing or future vulnerability has the potential to compromise your Immich instance. I'm not aware of any such vulnerability existing right now.

Immich Public Proxy provides a barrier of security between the public and Immich, and only allows through requests which you have publicly shared.

It is stateless and does not know anything about your Immich instance. It does not require an API key which reduces the attack surface even further. The only things that the proxy can access are photos that you have made publicly available in Immich, and it strips out most metadata such as locations, camera details, comments, etc.

This video will show how it operates and give some pointer son setting it up, and will also show a workaround I'm using to provide a public landing page for all your shared links on Immich, and how to nest a group of sub-albums on a webpage.

Intro 00:00

Immich Public Proxy GitHub project https://github.com/alangrainger/immich-public-proxy

My daily tech blog at https://gadgeteer.co.za/blog

#technology #selfhosting #photoalbums #Immich