Proxy setup | Immich | Page 1

merry violetBOT Apr 6, 2024, 8:14 PM

#

:wave: Hey @glad topaz,

Thanks for reaching out to us. Please follow the recommended actions below; this will help us be more effective in our support effort and leave more time for building Immich immich .

References

Container Logs: docker compose logs docs
Container Status: docker compose ps docs
Reverse Proxy: https://immich.app/docs/administration/reverse-proxy

Checklist

:blue_square: I have verified I'm on the latest release(note that mobile app releases may take some time).
:blue_square: I have read applicable release notes.
:blue_square: I have reviewed the FAQs for known issues.
:blue_square: I have reviewed Github for known issues.
:blue_square: I have tried accessing Immich via local ip (without a custom reverse proxy).
:blue_square: I have uploaded the relevant logs, docker compose, and .env files using the buttons below or the /upload command.
:blue_square: I have tried an incognito window, disabled extensions, cleared mobile app cache, logged out and back in, different browsers, etc. as applicable

(an item can be marked as "complete" by reacting with the appropriate number)

If this ticket can be closed you can use the /close command, and re-open it later if needed.

austere silo Apr 6, 2024, 8:16 PM

#

https://immich.app/docs/administration/reverse-proxy/

glad topaz Apr 6, 2024, 8:24 PM

#

austere silo https://immich.app/docs/administration/reverse-proxy/

i did nginx and my site cant be reached

austere silo Apr 6, 2024, 8:24 PM

#

I recommend getting a simple nginx page running before you try to proxy immich

#

there are lots of guides to getting nginx setup

glad topaz Apr 6, 2024, 9:10 PM

#

#

I have this setup but for proxy host ssl i get internal error

glad topaz Apr 6, 2024, 9:42 PM

#

@austere silo do you have a more detailed guide

noble shuttle Apr 6, 2024, 9:53 PM

#

glad topaz

SSL: http only

#

set a certificate for the page

#

or create one

glad topaz Apr 6, 2024, 9:54 PM

#

is a cloudflare tunnel just as secure

#

because i got that workiing easy

austere silo Apr 6, 2024, 9:54 PM

#

You won’t be able to upload files > 100 MB

glad topaz Apr 6, 2024, 9:55 PM

#

austere silo You won’t be able to upload files > 100 MB

because of the tunnel ?

noble shuttle Apr 6, 2024, 9:55 PM

#

yes

glad topaz Apr 6, 2024, 9:55 PM

#

dang

noble shuttle Apr 6, 2024, 9:55 PM

#

for the proxy over cloudflare, free is limited at 100mb

glad topaz Apr 6, 2024, 9:55 PM

#

so i have to do the reverse proxy for no limit

noble shuttle Apr 6, 2024, 9:56 PM

#

yes, but if you have no large files, you should be fine

glad topaz Apr 6, 2024, 9:56 PM

#

noble shuttle set a certificate for the page

i get internal error everytime i try to do this

noble shuttle Apr 6, 2024, 9:57 PM

#

wdym

glad topaz Apr 6, 2024, 9:57 PM

#

noble shuttle wdym

#

CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log
Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

at /app/lib/utils.js:16:13
at ChildProcess.exithandler (node:child_process:430:5)
at ChildProcess.emit (node:events:518:28)
at maybeClose (node:internal/child_process:1105:16)

noble shuttle Apr 6, 2024, 9:58 PM

#

get a cloudflare cert

#

1 sec

glad topaz Apr 6, 2024, 9:59 PM

#

noble shuttle 1 sec

ok

noble shuttle Apr 6, 2024, 9:59 PM

#

#

set it to 15 years

glad topaz Apr 6, 2024, 10:00 PM

#

should i put immich.hynsor.com for domains too

noble shuttle Apr 6, 2024, 10:00 PM

#

use *.domain.com and domain.com

glad topaz Apr 6, 2024, 10:00 PM

#

noble shuttle use *.domain.com and domain.com

ok done

noble shuttle Apr 6, 2024, 10:01 PM

#

download it and add it to your proxy

noble shuttle Apr 6, 2024, 10:02 PM

#

glad topaz

this error means, that you were not able to request a certificate from letsencrypt

glad topaz Apr 6, 2024, 10:02 PM

#

i add it throuh here correct ?

noble shuttle Apr 6, 2024, 10:03 PM

#

ye

noble shuttle Apr 6, 2024, 10:03 PM

#

glad topaz

did you fill out the dns provider and credentials file content correctly there?

glad topaz Apr 6, 2024, 10:04 PM

#

#

which format is it suppose to be

noble shuttle Apr 6, 2024, 10:05 PM

#

sec

#

i'd take pem

#

also make sure to have two seperate files

#

mydomain.private.pem
mydomain.public.pem

glad topaz Apr 6, 2024, 10:08 PM

#

noble shuttle mydomain.private.pem mydomain.public.pem

noble shuttle Apr 6, 2024, 10:08 PM

#

did you save the two seperate things

glad topaz Apr 6, 2024, 10:09 PM

#

yes

noble shuttle Apr 6, 2024, 10:09 PM

#

glad topaz Apr 6, 2024, 10:09 PM

#

noble shuttle

i only have origin

#

no private

noble shuttle Apr 6, 2024, 10:10 PM

#

revoke your cert and create a new one

#

you should see that

glad topaz Apr 6, 2024, 10:10 PM

#

now i do

#

same error

#

languid wharf Apr 6, 2024, 10:14 PM

#

You made sure to select the "PEM" key format?

glad topaz Apr 6, 2024, 10:14 PM

#

languid wharf You made sure to select the "PEM" key format?

yes

noble shuttle Apr 6, 2024, 10:15 PM

#

glad topaz

wrong order

#

key = private.pem
cert = public.pem

glad topaz Apr 6, 2024, 10:16 PM

#

ok it worked

#

this shows up now on immich.hynsor.com

#

where do i allow it in cloudflare

noble shuttle Apr 6, 2024, 10:21 PM

#

read the page

glad topaz Apr 6, 2024, 10:22 PM

#

what different ip

#

i pointed it to my server ip

noble shuttle Apr 6, 2024, 10:23 PM

#

is it disallowed?

glad topaz Apr 6, 2024, 10:23 PM

#

i dont think so

#

noble shuttle Apr 6, 2024, 10:25 PM

#

you need to use your external IP

#

please be really careful with exposing your services to the internet. It seems like you are not too experienced with self hosting. collect some information first and try out your self hosted stuff locally. when you understand what you are doing, you can expose it. it is important to be aware of the risks of exposing to the web

glad topaz Apr 6, 2024, 11:03 PM

#

noble shuttle please be really careful with exposing your services to the internet. It seems l...

I understand, thank you for looking out I put my external buy pages are just blank still

noble shuttle Apr 6, 2024, 11:20 PM

#

glad topaz I understand, thank you for looking out I put my external buy pages are just bla...

just watch a few tutorials and learn why and what you are doing

glad topaz Apr 6, 2024, 11:20 PM

#

Alright

noble shuttle Apr 6, 2024, 11:20 PM

#

and dont just copy paste commands, try to understand them

#

no sysadmin should ever just copy and paste commands and run them on the system

#

did you manage to get your page up and running?

glad topaz Apr 7, 2024, 12:05 AM

#

noble shuttle did you manage to get your page up and running?

No it just stays blank

noble shuttle Apr 7, 2024, 12:05 AM

#

what does that mean

glad topaz Apr 7, 2024, 12:08 AM

#

noble shuttle what does that mean

Nothing loads

#

Only time it shows something is when I put the ip to internal

noble shuttle Apr 7, 2024, 12:09 AM

#

cant really help without logs etc

#

what shows when you open the dev console (f12)

glad topaz Apr 7, 2024, 12:10 AM

#

One moment

glad topaz Apr 7, 2024, 12:13 AM

#

noble shuttle what shows when you open the dev console (f12)

says nothing

glad topaz Apr 7, 2024, 12:14 AM

#

noble shuttle you need to use your external IP

that is the router ip correct ?

noble shuttle Apr 7, 2024, 12:14 AM

#

https://whatismyipaddress.com/

noble shuttle Apr 7, 2024, 12:14 AM

#

glad topaz that is the router ip correct ?

192.168.x.x is internal

glad topaz Apr 7, 2024, 12:15 AM

#

one sec

noble shuttle Apr 7, 2024, 12:15 AM

#

your external address is given by your internet provider

glad topaz Apr 7, 2024, 12:15 AM

#

proxied or no ?

noble shuttle Apr 7, 2024, 12:15 AM

#

?

#

this ip is most likely not fix, so something like cloudflare-ddns comes in handy

glad topaz Apr 7, 2024, 12:16 AM

#

noble shuttle Apr 7, 2024, 12:16 AM

#

where is your website hosted

glad topaz Apr 7, 2024, 12:16 AM

#

noble shuttle where is your website hosted

namecheap

#

but i point my domain to cloudflare

noble shuttle Apr 7, 2024, 12:17 AM

#

where is immich hosted

#

on a local pc in your network?

glad topaz Apr 7, 2024, 12:17 AM

#

noble shuttle where is immich hosted

its not hosted

#

hynsor.com is point to cloudflare

noble shuttle Apr 7, 2024, 12:17 AM

#

where does immich run?

#

hynsor.com is your domain

glad topaz Apr 7, 2024, 12:18 AM

#

noble shuttle where does immich run?

yeah i dont have it hosted

noble shuttle Apr 7, 2024, 12:18 AM

#

how can you access it then?

glad topaz Apr 7, 2024, 12:19 AM

#

idk

noble shuttle Apr 7, 2024, 12:19 AM

#

is immich running right now?

glad topaz Apr 7, 2024, 12:19 AM

#

noble shuttle is immich running right now?

yes

#

oh

#

you were talking about immich

#

i thought you were talking about immich.hynsor.com

noble shuttle Apr 7, 2024, 12:20 AM

#

no

glad topaz Apr 7, 2024, 12:20 AM

#

noble shuttle how can you access it then?

its on my raspberry pi

noble shuttle Apr 7, 2024, 12:20 AM

#

ok

#

did you forward ports to your raspberry pi?

glad topaz Apr 7, 2024, 12:20 AM

#

yes

noble shuttle Apr 7, 2024, 12:21 AM

#

what port

glad topaz Apr 7, 2024, 12:21 AM

#

2283

noble shuttle Apr 7, 2024, 12:21 AM

#

why 2283?

glad topaz Apr 7, 2024, 12:21 AM

#

noble shuttle Apr 7, 2024, 12:21 AM

#

thats not port forwarding

glad topaz Apr 7, 2024, 12:22 AM

#

yeah i cant port forward like you would through router

noble shuttle Apr 7, 2024, 12:22 AM

#

thats needed to to reverse proxy

#

glad topaz Apr 7, 2024, 12:23 AM

#

no other way ?

noble shuttle Apr 7, 2024, 12:23 AM

#

the way you connect to the internet is trough your router

#

also the way the internet can connect to you is trough the router

#Proxy setup

References

Checklist