From 1f5bbeda518472d11ad8093efae68fe271505d54 Mon Sep 17 00:00:00 2001
From: Schneider Roland <roland.schneider@extern.a1.at>
Date: Mon, 10 Mar 2025 21:49:42 +0100
Subject: [PATCH] add immich

---
 .../docker-compose/immiche/docker-compose.yml | 17 ++++++-
 readme.md                                     | 45 ++++++++++---------
 2 files changed, 39 insertions(+), 23 deletions(-)

diff --git a/immich/docker-compose/immiche/docker-compose.yml b/immich/docker-compose/immiche/docker-compose.yml
index 92873bf..0ff296d 100644
--- a/immich/docker-compose/immiche/docker-compose.yml
+++ b/immich/docker-compose/immiche/docker-compose.yml
@@ -11,6 +11,15 @@ name: immich
 
 services:
   immich-server:
+    labels:
+      - traefik.http.routers.immich.rule=Host(`immich.rschneider.net`)
+      - traefik.http.routers.immich.tls=true
+      - traefik.http.services.immich.loadbalancer.server.port=2283
+      - traefik.http.routers.immich.service=immich
+      - traefik.http.routers.immich-public.rule=Host(`immich.rschneider.hu`)
+      - traefik.http.routers.immich-public.tls=true
+      - traefik.http.routers.immich-public.service=immich-public
+      - traefik.http.services.immich-public.loadbalancer.server.port=2283
     container_name: immich_server
     image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
     # extends:
@@ -23,13 +32,15 @@ services:
     env_file:
       - .env
     ports:
-      - '2283:2283'
+      - '4119:2283'
     depends_on:
       - redis
       - database
     restart: always
     healthcheck:
       disable: false
+    networks:
+      traefik_traefik:
 
   immich-machine-learning:
     container_name: immich_machine_learning
@@ -89,3 +100,7 @@ volumes:
   model-cache:
   postgres:
   immich:
+
+networks:
+  traefik_traefik:
+    external: true
diff --git a/readme.md b/readme.md
index 1cdfd8f..c95462e 100644
--- a/readme.md
+++ b/readme.md
@@ -4,26 +4,27 @@
 
 router redirects port range 4100-4200 to the infra server
 
-| port | service     | description     | url                                |
-|------|-------------|-----------------|------------------------------------|
-| 4100 | gitea       | web             |                                    |
-| 4101 | gitea       | ssh             |                                    |
-| 4102 | xwiki       | web             |                                    |
-| 4103 | keycloak    | web             |                                    |
-| 4104 | ldap        | web /phpldap    |                                    |
-| 4105 | ldap        | ldap/slapd      |                                    |
-| 4106 | ldap        | ldap/slapd/ssl  |                                    |
-| 4107 | keycloak    | keycloak web    |                                    |
-| 4108 | nexus       | admin web       |                                    |
-| 4109 | nexus       | admin web       |                                    |
-| 4110 | nexus       | docker registry |                                    |
+| port | service    | description     | url                                |
+|------|------------|-----------------|------------------------------------|
+| 4100 | gitea      | web             |                                    |
+| 4101 | gitea      | ssh             |                                    |
+| 4102 | xwiki      | web             |                                    |
+| 4103 | keycloak   | web             |                                    |
+| 4104 | ldap       | web /phpldap    |                                    |
+| 4105 | ldap       | ldap/slapd      |                                    |
+| 4106 | ldap       | ldap/slapd/ssl  |                                    |
+| 4107 | keycloak   | keycloak web    |                                    |
+| 4108 | nexus      | admin web       |                                    |
+| 4109 | nexus      | admin web       |                                    |
+| 4110 | nexus      | docker registry |                                    |
 | 4111 | vaultwarden | web             | https://vaultwarden.rschneider.net |
-| 4112 | jenkins     | jenkins         |                                    |
-| 80   | traefik     | traefic proxy   |                                    |
-| 4113 | traefik     | traefik webui   | https://traefik.rschneider.net     |
-| 53   | pihole      | pihole dns      |                                    |
-| 4114 | pihole      | pihole web      | https://pihole.rschneider.net      |
-| 4115 | nextcloud   | nextcloud web   | https://nextcloud.rschneider.net   |
-| 4116 | grafana     | grafana web     | https://grafana.rschneider.net     |
-| 4117 | prometheus  | prometheus web  | https://prometheus.rschneider.net  |
-| 4118 | loki        | loki web        | https://loki.rschneider.net        |
+| 4112 | jenkins    | jenkins         |                                    |
+| 80   | traefik    | traefic proxy   |                                    |
+| 4113 | traefik    | traefik webui   | https://traefik.rschneider.net     |
+| 53   | pihole     | pihole dns      |                                    |
+| 4114 | pihole     | pihole web      | https://pihole.rschneider.net      |
+| 4115 | nextcloud  | nextcloud web   | https://nextcloud.rschneider.net   |
+| 4116 | grafana    | grafana web     | https://grafana.rschneider.net     |
+| 4117 | prometheus | prometheus web  | https://prometheus.rschneider.net  |
+| 4118 | loki       | loki web        | https://loki.rschneider.net        |
+| 4119 | immich     | immich          | https://immich.rschneider.net      |