ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: ringofstorms:292c7ab911c3c3429b9ab98cda5847320710e7e6
Branches Tags
ringofstorms:master
..
compare: ringofstorms:c259a93c7aed09810233b4986602f6bc9e133972
Branches Tags
ringofstorms:master

3 commits
292c7ab911 ... c259a93c7a

Author SHA1 Message Date
Joshua Bell
c259a93c7a Switch Immich container to PostgreSQL 16 2026-02-08 22:41:54 -06:00
Joshua Bell
7bf071d0a1 Merge branch 'master' of ssh://git.joshuabell.xyz:3032/ringofstorms/dotfiles 2026-02-08 22:35:26 -06:00
Joshua Bell
a162c71e78 Refactor immich container config; enable firewall, resolved, PostgreSQL 2026-02-08 22:34:52 -06:00
1 changed files with 70 additions and 67 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/h001/containers/immich.nix
View file

@ -32,7 +32,7 @@ let
{ {
host = "${hostVarLibDir}/postgres"; host = "${hostVarLibDir}/postgres";
# Adjust based on container postgres data dir # Adjust based on container postgres data dir
container = "/var/lib/postgresql/17"; container = "/var/lib/postgresql/16";
user = "postgres"; user = "postgres";
uid = config.ids.uids.postgres; uid = config.ids.uids.postgres;
gid = config.ids.gids.postgres; gid = config.ids.gids.postgres;
@ -149,7 +149,8 @@ in
... ...
}: }:
{ {
config = { config = lib.mkMerge [
{
system.stateVersion = "25.05"; system.stateVersion = "25.05";
networking = { networking = {
@ -170,7 +171,7 @@ in
services.postgresql = { services.postgresql = {
enable = true; enable = true;
package = pkgs.postgresql_17.withPackages (ps: [ ps.pgvecto-rs ]); package = pkgs.postgresql_16.withPackages (ps: [ ps.pgvecto-rs ]);
enableJIT = true; enableJIT = true;
authentication = '' authentication = ''
local all all trust local all all trust
@ -220,10 +221,12 @@ in
requires = [ "postgresql.service" ]; requires = [ "postgresql.service" ];
after = [ "postgresql.service" ]; after = [ "postgresql.service" ];
}; };
}
# Allow Immich user to access the media directory {
# Allow Immich user to access the media directory for hardware transcoding
users.users.immich.extraGroups = [ "video" "render" ]; users.users.immich.extraGroups = [ "video" "render" ];
}; }
];
}; };
}; };
}; };