• 0 Posts
  • 7 Comments
Joined 1 year ago
cake
Cake day: February 9th, 2025

help-circle


  • I use a Pangolin reverse proxy with OIDC (PocketID) for family access to services, along with CrowdSec. For the Immich app access which needs to bypass auth login through the reverse proxy, I use ‘link share’ in Pangolin that gives me header tokens that can be entered in to the Immich app under Advanced settings.

    I’ve been an Immich user for over 2 years now, so it’s been a journey for me to implement it to this standard.

    Or as someone else suggests, try CloudFlare with something like Google Auth login. Just be aware that you are then exposing all your traffic to Cloudflare. I take that as a small sacrifice for simplicity.





  • Take from this anything of use to you: I syncthing my important Unraid server stuff to a MacBook running Backblaze with a 14TB external drive. DNS is handled by NextDNS in the cloud anyway, so it’s just Immich and other random family oriented services for me. I use Pangolin for exposed services.

    You could use syncthing (or Resilio) over a tailscale or headscale network or whateveritispeopleuse to a remote PC.

    My Docker compose files and VMs are backed up once a week via plugins on Unraid, which of course get duped via syncthing to the MacBook.

    I did try a Hetzner Storage Box for a while to replace Backblaze, but the hassle of having to keep an eye on the syncing was a pain and I fell back in to Backblaze on the MacBook as it’s a set and forget (as long as they don’t change the filetypes ignored…). I may go back to a Storage Box again.

    I do also want to look into redundancy with a spare server though so it becomes quicker/easier to get it all up and running in event of failure. This is where selfhosting starts getting serious!

    Just chucking this out there to help with the fediverse.