immich init

src/system/machines/server/system.nix

@@ -8,6 +8,7 @@
     nginx.enable = true;
     forgejo.enable = true;
     frigate.enable = false;
+    immich.enable = true;
 
     backup = {
       enable = true;
@@ -15,8 +16,9 @@
        "${config.user.keys.age.yubikey}"
        "${config.machines.keys.desktop.ssh}"
       ];
+      paths = [ "/root/.config/rclone" ];
       destination = "gdrive:backups/server";
-      schedule = "weekly";
+      schedule = "daily";
       keepLast = 2;
     };
   };

src/system/modules/immich/default.nix

@@ -0,0 +1,39 @@
+{ pkgs, lib, config, ... }:
+
+with lib;
+let
+  cfg = config.modules.system.immich;
+  nginx = config.modules.system.nginx;
+  domain = "ramos.codes";
+  port = 2283;
+
+in
+{
+  options.modules.system.immich = {
+    enable = mkEnableOption "Immich Photo Server";
+  };
+
+  config = mkIf cfg.enable {
+    services.immich = {
+      enable = true;
+      port = port;
+      host = "127.0.0.1";
+      mediaLocation = "/var/lib/immich";
+      machine-learning.enable = false;
+    };
+
+    modules.system.backup.paths = [
+      "/var/lib/immich"
+    ];
+
+    services.nginx.virtualHosts."photos.${domain}" = mkIf nginx.enable {
+      useACMEHost = domain;
+      forceSSL = true;
+      clientMaxBodySize = "50G";
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+}