Knossos

That’s always a danger.

You could host the server on its own vlan and use tailscale to tunnel from a VPS to your server. This way your IP isn’t exposed to the public. You can also add crowdsec or similar on the VPS.

I do the same thing with traefik on my dirt cheap VPS.

What do you mean?

I’ve been using Immich for a year now. I can really recommend it. You can even bulk import from Google using takeout.

You could try wormhole. It makes a direct connection.

Traefik is great. NPM is super easy to setup. The only downside is customisation. Traefik can do so much more.

You can also use something called wormhole. Very handy tech.

Looks very cool! Added it to my home lab to-do!

Wait 5 seconds to enjoy the scenery.

Anyway, like I thought earlier. I should definitely solve the puzzle like this.

The benefit is also it’s curse. It’s all open, so there can be a bunch of names and a bunch of apps. Nobody agrees what the best app is.

But once you get your own ecosystem set up, it is amazing.

Which is a huge hurdle for new people 😬

On my Fritzbox, I needed to add all my Subdomains to a list under:

DNS Rebind Protection Your FRITZ!Box suppresses DNS responses that refer to IP addresses in its own home network (DNS rebind protection). Here you can specify exceptions for which DNS rebind protection should not apply. Do this by entering the complete name of the host (domain name including the subdomain) in the list.

That’s under network settings, advanced. In case you have that.

I use a HDD for my immich instance. I have a feeling it might have made the initial import process quicker (complete google photos dump). However, general usage, I have found zero bottlenecks.