Immich service

Signed-off-by: Mel <einebeere@gmail.com>

2 files changed, 106 insertions, 0 deletions

diff --git a/machines/corsac/default.nix b/machines/corsac/default.nix
index f9d0a6e..b01b241 100644
--- a/machines/corsac/default.nix
+++ b/machines/corsac/default.nix
@@ -12,6 +12,8 @@
     ../../modules/www.nix
     ../../modules/nfs.nix
     ../../modules/jellyfin.nix
+
+    ../../services/immich.nix
   ];
 
   system.stateVersion = "24.05";
diff --git a/services/immich.nix b/services/immich.nix
new file mode 100644
index 0000000..b00f47c
--- /dev/null
+++ b/services/immich.nix
@@ -0,0 +1,104 @@
+{ auxiliaryPkgs, ... }:
+
+let
+  inherit (auxiliaryPkgs) common;
+
+  immichVersion = "v1.122.2";
+  immichDir = "/srv/immich";
+  immichLocalPort = 2283;
+
+  immichImage = common.pullImage {
+    registry = "github";
+    name = "immich-app/immich-server";
+    tag = immichVersion;
+    digest = "sha256:27ceb1867f5501818c86188c62924bbfd3024d8f74395cd66d6a302b01d1b2cd";
+    x86.sha256 = "sha256-JuImkiprPsleM3GWGwgFHLZ7M3JbQag+sOajocrgeH8=";
+  };
+
+  databaseImage = common.pullImage {
+    name = "tensorchord/pgvecto-rs";
+    tag = "pg14-v0.2.0";
+    digest = "sha256:90724186f0a3517cf6914295b5ab410db9ce23190a2d9d0b9dd6463e3fa298f0";
+    x86.sha256 = "0h1s11z5d4svg2whm7gw11dwpddg5k90fp62q3zirycms787f4d3";
+  };
+
+  redisImage = common.pullImage {
+    name = "redis";
+    tag = "6.2-alpine";
+    digest = "sha256:eaba718fecd1196d88533de7ba49bf903ad33664a92debb24660a922ecd9cac8";
+    x86.sha256 = "0fsx6vyfg3v5w0f46kniiyzik4anfsdih9pnnrf967dd0db78c8a";
+  };
+
+  immichMlImage = common.pullImage {
+    registry = "github";
+    name = "immich-app/immich-machine-learning";
+    tag = immichVersion;
+    digest = "sha256:5c4e7a25a01e4dd52e9b919a277a2d870af0a08094e4089c85708e402512a8aa";
+    x86.sha256 = "sha256-CK+nJorxS7yC6F/Vr7hAt7KH3bGqEFqzvYu88aWU/Ls=";
+  };
+
+in
+{
+  foundation.service.immich = {
+    immich = {
+      fullImage = immichImage;
+      environment = {
+        "IMMICH_MACHINE_LEARNING_URL" = "http://ml:3003";
+        "DB_HOSTNAME" = "db";
+        "REDIS_HOSTNAME" = "kv";
+        "DB_DATABASE_NAME" = "immich";
+        "DB_PASSWORD" = "immich";
+        "DB_USERNAME" = "immich";
+      };
+      volumes = [
+        [ "/etc/localtime" "/etc/localtime:ro" ]
+        [ "${immichDir}/upload" "/usr/src/app/upload" ]
+      ];
+      ports = [ immichLocalPort ];
+    };
+
+    db = {
+      fullImage = databaseImage;
+      environment = {
+        "POSTGRES_DB" = "immich";
+        "POSTGRES_INITDB_ARGS" = "--data-checksums";
+        "POSTGRES_PASSWORD" = "immich";
+        "POSTGRES_USER" = "immich";
+      };
+      volumes = [
+        [ "${immichDir}/pgdata" "/var/lib/postgresql/data" ]
+      ];
+      cmd = [
+        "postgres"
+        "-c" "shared_preload_libraries=vectors.so"
+        "-c" "search_path=\"$user\", public, vectors"
+        "-c" "logging_collector=on"
+        "-c" "max_wal_size=2GB"
+        "-c" "shared_buffers=512MB"
+        "-c" "wal_compression=on"
+      ];
+    };
+
+    kv = {
+      fullImage = redisImage;
+    };
+
+    ml = {
+      fullImage = immichMlImage;
+      volumes = [
+        [ "${immichDir}/ml-cache" "/cache" ]
+      ];
+    };
+  };
+
+  services.nginx.virtualHosts = {
+    "img.rnrd.eu" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${toString immichLocalPort}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+}