Just your normal everyday casual software dev. Nothing to see here.

People can share differing opinions without immediately being on the reverse side. Avoid looking at things as black and white. You can like both waffles and pancakes, just like you can hate both waffles and pancakes.

been trying to lower my social presence on services as of late, may go inactive randomly as a result.

  • 0 Posts
  • 13 Comments
Joined 3 years ago
cake
Cake day: August 15th, 2023

help-circle






  • this right here. If you have immich setup behind a reverse proxy, just route any requests that use the /share/ and /s/ (the custom link version) on the proxy manager to route to the immich instance, and have it 403 on anything else when the request is not via the vpn

    Just be aware that immich uses links like share-* as well so be sure to have that trailing / to make it so only shared links and albums can be.

    edit: Actually looking into this route further, it looks like immich as a whole needs more than just the /share/ and the /s/ endpoints exposed to function correctly. I will update this in a little when i figured out more on what is actually needed

    update: So it seems immich will not support this style setup without quite a bit of hands on. You need to give at minimum /share/, /s/, /_app/ and /api/ in order to actually go this route. and at that point since you’ve given /api/ you’ve essentially publicly opened the instance anyway. While you can go through and individually do each endpoint. It requires access to /api/albums /api/assets and a few other endpoints, these endpoints do seem to need auth or some form of verification tho

    for anyone wanting to still go through with it. You can reverse proxy it by allowing the endpoints

    • _app/ a bunch of immich internal files for serving content
    • api/
      • server/
        • config: shows basic infomation about the server
        • media-types: shows what media types the server supports
        • features: discloses what features the server supports
      • shared-links/me: 401, 403’s or shows what links the user account can sign into
      • albums/: 403’s on any album endpoint that doesn’t also include the album’s public slug in the URL
      • timeline/
        • buckets: displays timeline buckets. 401 or 403’s on no auth
        • bucket/: displays timeline info on the requested resource. 401 or 403’s on info unless info is provided about what its trying to access
      • assets/: 401 or 403’s on any request that doesn’t contain a public slug in the url

    The nginx location regex I used for my testing(although not very read friendly) was

    location ~ /(api/(server/(config|media-types|features)|shared-links/me|albums/|timeline/(bucket|buckets)|assets/)|(share|s)|_app/){
      proxy_pass *immich instance*;
    }
    

    note: this was found just by basic testing using NPM on my environment, I may have missed some more specific calls especially regarding videos as I don’t really do any video photography to allow for testing.

    Additional note: You may end up confusing your users with the UI though, as since lets you click on the immich banner to get to login, but everything would be blocked. You may just want to use the immich public project that was linked later in this discussion…



  • I agree he will try, but I don’t agree he will succeed. Even the big guys want cheaper hardware. Look at CXMT for example. Apple is currently in the process of trying to remove restrictions against the chinese chip producer because it currently is restricted import due to military concerns.

    additional content: it doesn’t need to be a non-US company either. They could do the same in the US. All it takes is the capital funding to get the ball rolling. to bring back to example of EV’s, they are getting around that import ban by selling to canada and then having canada sell to the US, as well as working on making factories in the US itself which wouldn’t be effected by an import ban.

    It isn’t easy to say the least but, I don’t think a straight won’t happen is valid here.


  • Sure it will. As soon as a different company other than the US centric megalords decides to join the market you’ll see prices plummet faster than you can blink. Look at the Chinese EV market for example. They sell them so low that the US is actively banning them for import.

    They are already working on chip production, and they have been experimenting with the computer hardware market for years now. Prices remaining stupid high only works in their favor as there is a direct relation to companies users are willing to buy from, and the products price. Eventually you will hit the point where the user is ok with a lesser known company or product if it means saving almost 400$

    I’m not saying anyone should buy said products but, realistically you can’t keep prices artificially high forever, eventually someone will take advantage and undercut you. You aren’t going to buy an Xbox at 1k when you can buy something similarly performed for 600, thats why the steam machine seems to be DOA. it’s 2-300$ over current DIY price, and there are consoles for roughly 300-400 less than it so it missed both markets.

    edit: changed it away from being country specific, as technically this change could be from any country.



  • This article I think shares my thoughts on it, Arguably I don’t know if the devs even got faster… Like its a nice resource but, there’s so much trial and error involved now, and every prompt now requires essentially relearning a new codebank.

    Like sure immediate result got faster… but you lose all that with the extended time taken learning how it works and why it works.