nixify immich

hosts/chunk/default.nix

@@ -23,6 +23,7 @@
     ./tor.nix
     ./ghost.nix
     ./conduit.nix
+    ./immich.nix
   ];
 
   sops.age.keyFile = "/root/.config/sops/age/keys.txt";

hosts/chunk/immich.nix

@@ -0,0 +1,87 @@
+{
+  pkgs,
+  config,
+  ...
+}: let
+  uploadLocation = "/mnt/photos/immich";
+  thumbsLocation = "/opt/immich/thumbs";
+  profileLocation = "/opt/immich/profile";
+  dbDataLocation = "/opt/immich/postgres";
+  modelCache = "/opt/immich-ml";
+in {
+  virtualisation.oci-containers.containers = {
+    immich-server = {
+      image = "ghcr.io/immich-app/immich-server:release";
+      autoStart = true;
+      ports = ["127.0.0.1:2283:2283"];
+      pull = "newer";
+      volumes = [
+        "${uploadLocation}:/usr/src/app/upload"
+        "${thumbsLocation}:/usr/src/app/upload/thumbs"
+        "${profileLocation}:/usr/src/app/upload/profile"
+      ];
+      environment = {
+        REDIS_HOSTNAME = "immich-redis";
+        DB_HOSTNAME = "immich-db";
+      };
+      networks = ["immich-net"];
+      dependsOn = ["immich-db" "immich-redis"];
+    };
+
+    immich-redis = {
+      image = "redis:6.2-alpine";
+      autoStart = true;
+      pull = "newer";
+      networks = ["immich-net"];
+    };
+
+    immich-db = {
+      image = "tensorchord/pgvecto-rs:pg14-v0.2.0";
+      autoStart = true;
+      pull = "newer";
+      environment = {
+        POSTGRES_PASSWORD = "postgres";
+        POSTGRES_USER = "postgres";
+        POSTGRES_DB = "immich";
+        POSTGRES_INITDB_ARGS = "--data-checksums";
+      };
+      volumes = ["${dbDataLocation}:/var/lib/postgresql/data"];
+      cmd = [
+        "postgres"
+        "-c" "shared_preload_libraries=vectors.so"
+        "-c" ''search_path="$$user", public, vectors''
+        "-c" "logging_collector=on"
+        "-c" "max_wal_size=2GB"
+        "-c" "shared_buffers=512MB"
+        "-c" "wal_compression=on"
+      ];
+      networks = ["immich-net"];
+    };
+
+    immich-ml = {
+      image = "ghcr.io/immich-app/immich-machine-learning:release";
+      autoStart = true;
+      pull = "newer";
+      environment = {
+        REDIS_HOSTNAME = "immich-redis";
+        DB_HOSTNAME = "immich-db";
+      };
+      volumes = ["${modelCache}:/cache"];
+      networks = ["immich-net"];
+    };
+  };
+
+  systemd.services.create-immich-net = {
+    serviceConfig.Type = "oneshot";
+    wantedBy = with config.virtualisation.oci-containers; [
+      "${backend}-immich.service"
+      "${backend}-immich-db.service"
+      "${backend}-immich-redis.service"
+      "${backend}-immich-ml.service"
+    ];
+    script = ''
+      ${pkgs.podman}/bin/podman network exists immich-net || \
+      ${pkgs.podman}/bin/podman network create immich-net
+    '';
+  };
+}